Log HTTP Requests
Log and view all WP HTTP requests
Use with caution
Log HTTP Requests works, but test it on a staging site before relying on it in 2026. It runs on 2K+ sites, is rated 5/5 and was last updated 11 months ago, and scores 55/100 on our health check.
- Only tested up to WordPress 6.8 (latest is 7.1)
How does it stack up?
Side-by-side on installs, updates, ratings & support
Daily downloads
Download spikes usually follow a new release — each site that auto-updates counts as a download.
Rankings
Where Log HTTP Requests stands todayWordPress.org search rankings
Live position in the plugin search, top 100| Keyword | Position |
|---|---|
| api | >100 |
| log | #37 |
| requests | #5 |
| update checks | #32 |
| wp_http | #2 |
Version adoption
Share of active sites per release.
Rating breakdown
★★★★★★★★★★ 5 from 15 reviews
About Log HTTP Requests
From the official readme · v1.5.0Description
Log and view all WP HTTP requests
How long do [core / plugin / theme] update checks take to run? What data about my site is being sent out? What about all those ajax requests? The answers to these questions are just a few clicks away.
This plugin logs all WP_HTTP requests and displays them in a table listing for easy viewing. It also stores the runtime of each HTTP request.
Available Hooks
Customize the length (in days) before older log items are removed:
add_filter( 'lhr_expiration_days', function( $days ) {
return 7; // default = 1
});
Don’t log items from a specific hostname:
add_filter( 'lhr_log_data', function( $data ) {
if ( false !== strpos( $data['url'], 'wordpress.org' ) ) {
return false;
}
return $data;
});
In the above example, the $data array keys correspond to columns within the lhr_log database table.
Important Links
Installation
- Download and activate the plugin.
- Browse to
Tools > Log HTTP Requeststo view log entries.
Changelog
1.5.0
- Security: Fixed SQL injection vulnerabilities in cleanup() and capture_request() methods
- Security: Added prepared statements for all database queries
- Security: Added input sanitization for POST/GET data with proper type checking
- Security: Added proper output escaping throughout templates
- Security: Fixed potential XSS vulnerability in JavaScript table rendering
- Security: Improved data validation with absint() and floatval() for numeric values
- Security: Replaced json_encode() with wp_json_encode() for better security
- Security: Added capability check to settings page for better access control
- Improvement: Updated WordPress compatibility to 6.8
- Improvement: Added text domain for internationalization support
- Improvement: Modernized code to follow WordPress coding standards
- Improvement: Replaced deprecated current_time(‘timestamp’) with modern WordPress functions
- Improvement: Improved database table creation using dbDelta() and get_charset_collate()
= 1.4.1
* Fixed PHP8 deprecation notices
1.4
- Added extra ajax role validation (props pluginvulnerabilities.com)
1.3.2
- Escaped URL field to prevent possible XSS (props Bishop Fox)
1.3.1
- Ensured compatibility with WP 5.8
1.3
- Minor PHP cleanup
- Ensured compatibility with WP 5.7
1.2
- Moved “Log HTTP Requests” to the
Toolsmenu (props @aaemnnosttv) - Added “Status” column to show HTTP response code (props @danielbachhuber)
- Added prev/next browsing to the detail modal (props @marcissimus)
- Added keyboard support (up, down, esc) to the detail modal (props @marcissimus)
- Added raw timestamp to “Date Added” column on hover
- Added hook docs to the readme
For developers
Is this your plugin? Show off the numbers.
Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.
Best Log HTTP Requests alternatives
All api plugins →
FAQ
Log HTTP Requests: quick answers
Straight answers, pulled from live WordPress.org data.
Live data from WordPress.org · checked Sep 26, 2026
Is Log HTTP Requests free?
Yes. Log HTTP Requests is free to download and use from the official WordPress.org plugin directory.
Is Log HTTP Requests safe to use in 2026?
Log HTTP Requests works, but test it on a staging site before relying on it in 2026. It runs on 2K+ sites, is rated 5/5 and was last updated 11 months ago, and scores 55/100 on our health check.
How many websites use Log HTTP Requests?
Log HTTP Requests is active on 2K+ WordPress websites and has been downloaded 80,771 times since it launched in July 2017. It was downloaded 893 times in the last 30 days.
Does Log HTTP Requests work with WordPress 7.1?
Log HTTP Requests is officially tested up to WordPress 6.8.10, while the latest release is 7.1.2. It may still work, but try it on a staging site first.
When was Log HTTP Requests last updated?
The latest version, 1.5.0, was released on November 11, 2025 (11 months ago).
Who makes Log HTTP Requests?
Log HTTP Requests is developed and maintained by Matt Gibbs.
What are the best alternatives to Log HTTP Requests?
The most popular alternatives to Log HTTP Requests are WP Consent API (200K+ installs), Disable REST API (80K+ installs) and Mailgun for WordPress (80K+ installs).
Powered by PageForge
Want thousands of pages that rank like these? Build them in an afternoon.
This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.
- CSV, Google Sheets & API data sources
- AI content, schema & internal links per page
- Works with Elementor, Gutenberg, Yoast & Rank Math
- Free on WordPress.org — no credit card
