Server Info – System Health & Diagnostics Suite

Server Info provides a practical dashboard for inspecting the hosting environment behind a WordPress site. It brings important WordPress, PHP, database, caching, certificate, and diagnostic details together without changing the public site.

All diagnostic features are free. The optional Support area offers one-time voluntary payments through Freemius; paying does not unlock or restrict plugin functionality.

Overview and diagnostics

• PHP security warning across the dashboard when the server’s PHP version is affected by the PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619).
• Server hostname, IP address, protocol, operating system, web server, and resource usage.
• SSL/TLS issuer, hostname, expiry date, and remaining days, with graceful unavailable states.
• Optional domain registration expiry and registrar lookup, disabled by default.
• PHP version, limits, extensions, configuration summary, and a detailed phpinfo view.
• Database version, size, charset, collation, limits, and largest tables.
• WordPress version, memory, debugging, permalinks, theme, and plugin status.
• OPcache, Redis, Memcached, object cache, and output buffering detection.
• Configuration, file permission, cron, and error-log diagnostics.

Administrator controls

• Optional admin bar environment HUD.
• Compact optional admin footer summary.
• Display schemes and custom background/text colors.
• Settings for external domain-expiry lookup and admin display elements.

The dashboard and HUD are available only to users with the manage_options capability.

External Services

Server Info includes the Freemius SDK for optional usage opt-in and voluntary one-time supporter payments. Freemius communication is subject to user consent where requested by the SDK. The checkout script is loaded from checkout.freemius.com only after an administrator selects a support amount. See the Freemius privacy policy and terms.

The optional domain-expiry setting is disabled by default. When enabled and an administrator opens the dashboard, the plugin downloads IANA’s public RDAP bootstrap file (data.iana.org, cached for a week) and sends only the site’s registrable domain, never the full hostname, to the registry’s HTTPS RDAP service, or to rdap.org when IANA lists no RDAP service for the extension. If RDAP cannot provide a result, it may query the registry’s public WHOIS server over port 43. To find that server for less common extensions, it sends only the domain extension (for example de) to whois.iana.org. These services use the domain name to return public registration data. See the RDAP bootstrap service, IANA WHOIS, RDAP.org, and the applicable registry’s terms and privacy policy.

The SSL/TLS certificate check connects from the WordPress server to the site’s own hostname on port 443 to read the public certificate. No visitor data is sent.

When the server reports an internal address, the plugin resolves the site’s own hostname through the server’s DNS resolver to show its public IP address. The PHP security warning is calculated locally from the PHP version and links to the PHP project’s advisory; no data is sent.