Eyesite Monitor

Your site can look fine and still lose money: the checkout fails after a plugin update, the contact form stops sending e-mails, a payment gateway silently drops orders, or the site goes down at night. Usually the owner finds out days later, from an unhappy customer. Eyesite Monitor checks your WordPress site and WooCommerce store for exactly these problems and tells you in plain language what broke and what to do about it. It works on its own inside WordPress. If you connect it to the free Eyesite service (eyesite.pl), your site is also checked from outside every minute and you get an e-mail as soon as something stops working. What it catches

• The store stops selling: failed payments, a broken cart or checkout, missing shipping methods and unusual silence when no orders come in.
• The contact form stops sending: failed submissions, e-mails that never leave the server and messages that would otherwise be lost.
• The site goes down: availability checked every minute (when connected), plus disk space, memory and WP-Cron on the server.
• Google or AI assistants cannot see the site: indexing blocks, sitemap, structured data, and whether ChatGPT, Claude and Perplexity may read it.
• Security gaps: WordPress versions with known vulnerabilities, SSL certificate expiry, changed core files, missing two-factor authentication.
• Errors visitors see: JavaScript and PHP errors, including errors on contact forms.

8.8.84

• Readme: the External services section now describes the Eyesite phone app (QR pairing, what the phone reads) and the daily page-speed measurement.

8.8.83

• New: the phone app summary includes the dates of recent speed measurements, for the speed chart in the app.

8.8.82

• New: mobile speed is measured once a day on its own (before, only after a visit to the WordPress dashboard, so the result could be weeks old). The three biggest slow-downs from the measurement are kept for the app. The phone app summary also lists which optional checks are switched off.

8.8.81

• New: the phone app summary now includes a quick overview: domain and SSL expiry, form submissions today and this week (time, page and delivery state only, no names, emails or content), shop today (orders, checkout test, out-of-stock bestsellers, abandoned carts), admin logins (failed attempts in 24 h, last login, logins from a new place), file integrity and mobile speed. Read-only data the plugin already collects.

8.8.80

• Fix: no false "suspicious PHP file in uploads" alarm for plugin data files that start with __halt_compiler() (All In One Security keeps its firewall settings in uploads/aios/firewall-rules/settings.php and rewrites it on its own; every rewrite used to send a new alarm). PHP stops reading such a file at that line, so nothing after it can run. Code before __halt_compiler() is still reported.

8.8.79

• Fix: when 5 or more plugins and themes are waiting for an update, the to-do list shows "Many outdated plugins and themes (N)" with a link to the updates screen (5 points, like any other warning). Before, outdated plugins without a known hole were not mentioned at all.

8.8.78

• Fix: a plugin or theme with a critical known hole (CVSS 9.0 or higher, or a high-rated hole that needs no login) now puts the health score in the red zone (at most 50). Before, it cost 15 points like any other problem, so a site with an unauthenticated file-upload hole in Elementor Pro still showed 80/100 and "the site works and is safe". The "after fixing" estimate still shows the score without the limit.

8.8.77

• Fix: one pairing code gives exactly one phone key, even when the app sends two requests at the same moment.

8.8.76

• Fix: the app talks to the site through its /wp-json/ address instead of the home page, so pairing works on sites where the home page is redirected (language versions, Cloudflare rules).

8.8.75

• Fix: the Eyesite app QR code is now shown on connected sites too (in the "Monitoring active" bar, open until the first phone is paired). Before, it lived only in the connection section, which disappears after connecting.

8.8.74

• New: the Eyesite app also shows traffic (visitors, views, orders, conversion, top pages and sources for 30 days, from the plugin's own cookie-free counters) and the behaviour insights, when these features are switched on.

8.8.73

• New: the Eyesite app QR code now carries a one-time pairing code valid for 10 minutes. The app exchanges it for its own read-only key (separate from the monitoring key) and shows the dashboard summary on the phone: score, what to fix, forms, mail, cart and payments, 30-day uptime and recent important events. No form contents, customer data or IP addresses leave the site. Paired phones are listed in the connection section and can be disconnected with one click.

8.8.72

• New: a QR code in the connection section pairs the site with the Eyesite app for Android (status and alerts on the phone). The code carries only the status page name and the site address; it is drawn in the browser by the bundled qrcode-generator library (MIT), with no external requests.

8.8.71

• New: a simple Eyesite consent banner for the behaviour analysis, switched on with one click when the site has no consent banner. Equal "agree" and "no, thanks" buttons, the choice is remembered for 12 months, [eyesite_zgoda_ustawienia] reopens it, and it hides itself when another consent banner is present.
• New: one-click section "Statystyki i nagrania Eyesite" in the privacy policy page, kept in sync with the settings and removed when the analysis is turned off; a copy button when the policy comes from an external generator. Older versions: see changelog.txt in the plugin folder.