Pluginventory

Pluginventory is the lightweight connector plugin that links your WordPress site to your Pluginventory account. Once installed and paired, it sends a daily signed report so you can see every plugin across every site you manage — all in one place. Rest easy: it can’t change or update your plugins but is only used for reporting.

Perfect for agencies and freelancers managing multiple WordPress sites.

If you manage more than a few WordPress sites, it’s easy to forget which plugins are running where — especially when clients can install anything themselves. And when a site goes down, plugins are almost always the reason: Patchstack’s 2026 security report found that 91% of new WordPress vulnerabilities came from plugins, not themes.

Managing plugins across multiple sites on different servers makes this even harder. Without the right tool, you’re either logging into each one, or finding out something’s wrong when a client calls.

Pluginventory gives you a single dashboard to see every plugin across every WordPress site you manage. Search any plugin instantly. Spot what’s outdated, inactive, or recently added. Know exactly where to act — without logging into a single site or compromising your security.

What it does

• Sends a daily HMAC-signed report of your installed plugins, their versions, active/inactive status, and available updates — transmitted over HTTPS
• Lets you trigger an on-demand report at any time from the Pluginventory dashboard or directly from your WordPress admin
• Works on single-site and multisite (subdomain and subdirectory) WordPress installs
• Fully supports network-wide activation with a dedicated Network Admin settings screen for bulk pairing and reporting

What it does NOT do

• It cannot install, update, activate, deactivate, or delete any plugins on your site
• It does not collect or transmit any personally identifiable information
• It does not run any code on your site’s front end

How it works

1. Install and activate this plugin on your WordPress site
2. Log in to your Pluginventory account at app.pluginventory.com
3. Generate an Install Token from your account page
4. Paste the token into the Pluginventory settings screen and click Pair Site
5. Your site is now connected — reports will be sent automatically every day

Security

All reports are authenticated with an HMAC-SHA256 signature using a secret that is unique to your site and generated at pairing time. Your Pluginventory account verifies this signature before accepting any report. Tokens are stored as WordPress options and are never exposed in your site’s HTML or source. All communication requires HTTPS — non-HTTPS App URLs are blocked.

Multisite support

When network-activated, Pluginventory adds a Network Admin > Settings > Pluginventory screen where you can:

• Set shared App URL and Install Token defaults for all subsites
• Bulk pair all subsites with one click
• Bulk send reports for all subsites
• Pair or trigger individual subsites from the same screen

Read the full description on the official page →