Activity Link Preview For BuddyPress vs Simple History – Track, Log, and Audit WordPress Changes

Activity Link Preview For BuddyPress turns a plain URL into a rich card. When a member pastes a link into the activity composer or a comment, the plugin reads the page, pulls a title, description and image, and shows a preview card before they post. Saved previews render server-side, so they still display when JavaScript is off. It needs BuddyPress or BuddyBoss Platform active. There is no settings page: previews work as soon as you activate the plugin, and developers can change behaviour through filters. What you get Rich previews as members type * Detects URLs as they are typed or pasted into the activity form. * Shows title, description and a featured image in a card the member can review before posting. * Multiple image selection: when a page offers several images, prev and next buttons let the member pick one, with an “Image X of Y” counter. * The preview clears itself when the URL is removed from the composer, and blocked or invalid URLs show an inline error instead of failing quietly. Internal member and group cards, with no HTTP request * Sharing a link to a member profile on your own site (/members/username/) builds a card from your database: display name, the XProfile About text, and the member’s avatar. * Sharing a link to a group (/groups/group-slug/) builds a card with the group name, description and group avatar. * Because this reads locally, there is no self-request and no external fetch, which keeps busy sites fast. Comments and embeds * Link previews work in activity comments and replies, not just top-level posts. * Native embeds for Twitter/X and Facebook. * Inline video and rich embeds via WordPress oEmbed (YouTube, Vimeo and other providers WordPress supports). * Short URLs (bit.ly, tinyurl and similar) are resolved to the real destination before the preview is built. Fast and safe by default * Per-URL caching, plus 15-minute negative caching so a slow or unreachable link is not retried on every render. * Comment rendering never fetches remote URLs, so a dead link cannot delay a page load. * SSRF protection blocks localhost, private and reserved IP ranges, and re-validates redirect targets. * Nonce verification, logged-in-only parsing, and sanitized and escaped output. Works alongside your platform * On BuddyBoss Platform with its own link preview enabled, this plugin stands down so you never get two cards on one post. * On Youzify with its wall URL preview enabled, it does the same. * Preview data is included in the BuddyPress REST API activity response. Developer friendly * bp_activity_link_preview_load_assets – control which pages load the CSS, JS and social SDKs. * bp_activity_parse_url_preview – filter the preview data returned by the parse endpoint. * bp_activity_link_parse_url – filter the parsed result before it is returned. * bp_activity_link_parse_url_shorten_url_provider – add or remove short-URL providers to resolve. * bp_oembed_discover_support – opt in to oEmbed discovery for unknown providers. * bp_activity_link_preview_enable_comments – turn preview handling in activity comments on or off. Perfect For BuddyPress and BuddyBoss communities where members share articles, videos and news Groups that use the activity stream as a reading or link-sharing feed Communities that link internally to member profiles and groups Any activity stream that currently shows bare, unclickable-looking URLs Premium Support Our support team can help with setup, theme compatibility and troubleshooting. Reach us through the links below. Documentation Documentation and Support – Setup walkthrough and usage guides for every Wbcom plugin Translations English (default) Ready for translation in your language with the included POT file RTL language support included Links Plugin Homepage Documentation Support Request Features Compatibility WordPress 6.5 and higher PHP 8.0 and higher BuddyPress 6.0+ or BuddyBoss Platform (required – the plugin deactivates itself if neither is active) Tested with popular themes including BuddyX, Reign and Youzify What’s New in 1.7.4 A performance and security pass. Plugin assets and the Twitter and Facebook SDKs now load only in activity contexts instead of on every page. Failed link lookups are cached for 15 minutes and comment rendering never fetches remote URLs, so slow links no longer hold up a page. Blocked or invalid URLs now report the problem in the composer, scraped titles and descriptions are sanitized before saving, and short-URL resolution re-validates its redirect target against the SSRF guard. Third-Party Services This plugin renders native Twitter/X and Facebook embeds. Those embeds can only be rendered by each network’s own script, so the plugin loads that script directly from the network: Twitter/X widgets.js, loaded from platform.twitter.com. Terms of service: https://twitter.com/en/tos – Privacy policy: https://twitter.com/en/privacy Facebook SDK, loaded from connect.facebook.net. Terms of service: https://www.facebook.com/terms.php – Privacy policy: https://www.facebook.com/privacy/policy/ These scripts load only on BuddyPress activity screens (the activity directory, member activity and group screens), never site-wide. On those screens they load whether or not a Twitter or Facebook link is actually present, so the visitor’s browser contacts Twitter and Facebook on every activity page view. Those services can therefore see the visitor’s IP address, user agent and referring page, and may set their own cookies. If your site needs to avoid that (for example to satisfy a consent requirement), use the bp_activity_link_preview_load_assets filter to stop the assets loading: add_filter( 'bp_activity_link_preview_load_assets', '__return_false' ); No data is sent to Wbcom Designs, and the plugin itself collects nothing. More Free Tools from Wbcom Designs Rich link previews make your activity stream worth reading, but a stream is only one part of a community. These other free tools from Wbcom Designs fill in the rest of the space your members spend time in, from the theme and social network itself to forums, media, events, gamification, directories, jobs, and courses. BuddyX – A free, fast community theme for BuddyPress, BuddyBoss and PeepSo with a modern layout and dark mode. BuddyNext – Stand up a complete WordPress community with activity streams, member spaces, profiles, direct messaging, and built-in moderation. Jetonomy – Add forums, question-and-answer boards, and idea spaces that stay tidy through trust-based auto-moderation even past 100,000 topics. Mediaverse – Let members build photo and video albums, react, follow each other, and message privately while AI moderation keeps things clean. Eventonomy – Run community events with RSVPs, calendars, and front-end submissions. WB Gamification – Reward members with points, badges, and leaderboards to keep engagement high. Listora – Publish searchable directories across ten listing types with reviews, maps, and member-submitted entries from the front end. WP Career Board – Add a job board with front-end listings, applications, and employer profiles. Learnomy – Build and sell online courses, auto-grade quizzes, collect payments, and award certificates when learners finish.

Trusted by 300,000+ WordPress sites, rated 4.9 stars with 450+ five-star reviews, actively developed for 10+ years, and translated into 15+ languages. Simple History is the complete audit log for WordPress. It tracks every meaningful change — content edits, user logins, plugin updates, security events, and more — so site owners, teams, agencies, and developers always know who did what and when. Just install and activate; no configuration required. Every event is written to be read: plain language like Updated page “About us”, relative timestamps such as “5 minutes ago”, and before/after comparisons instead of raw data dumps. 🔍 How Simple History Helps in Real Situations Track what’s happening on your site “Has anyone done anything today? Ah, Sarah uploaded the new press release and created an article for it. Great — now I don’t have to do that.” Identify issues and debug faster “The site feels slow since yesterday. Has anyone done anything special? … Ah, Steven activated ‘naughty-plugin-x’, that must be it.” Keep freelancers & agencies accountable “I hired a developer to optimize my site. But did they actually do anything? A quick glance at Simple History shows me exactly what they worked on.” Spot suspicious activity early “I see three failed logins from an unfamiliar IP address overnight. Let me click the IP to check all activity from that address — just those attempts, nothing else. Good to know.” ✨ What Simple History Tracks Security & Monitoring Failed user logins with IP tracking and filtering by type (wrong password vs. non-existent username) Core file integrity checks against official checksums Forced security auto-updates from WordPress.org Site Health status changes Admin page access denied events Content & Users Posts, pages, and custom post types — create, edit, delete, and homepage assignment Attachments with image edit details (crop, rotate, flip, scale) and thumbnail previews Taxonomies with detailed diffs of name, slug, description, and parent Comments, menus (with item-level detail), and widgets User profiles, logins, logouts, and role changes Notes — the collaboration feature in WordPress 6.9 System & Updates Plugin lifecycle: install, update, activate, deactivate, delete, and auto-update toggle Theme install, update, activate, switch, and delete WordPress core updates (manual and automatic) Translation and language pack updates Available update notifications Settings and option screen changes Privacy & Compliance Privacy data export and user data erasure requests Privacy page changes IP addresses anonymized by default — no cookies, no external fonts WordPress AI plugin activity is logged without ever storing API keys or prompt content 🔌 Built-in Third-Party Plugin Support Simple History includes built-in logging for: WordPress AI plugin – Feature toggles, AI provider and model changes, and connector approval requests, grants, and revocations Jetpack – Module activations and deactivations Advanced Custom Fields (ACF) – Field group and field changes User Switching – User switch events WP Crontrol – Cron event and schedule changes Enable Media Replace – File replacement details Limit Login Attempts – Login attempts, lockouts, and config changes Redirection – Redirect and group changes, global settings Duplicate Post – Post and page cloning Beaver Builder – Layout, template, and settings saves Is your plugin missing? Plugin authors can add support using the logging API. 💬 What Users Say 450+ five-star reviews on WordPress.org: “So far the best and most comprehensive logging plugin” – @herrschuessler “The best history plugin I’ve found” – Rich Mehta “Fantastic plugin I use on all sites” – Duncan Michael-MacGregor “It is a standard plugin for all of our sites” – Mr Tibbs 🚀 View Your Log Everywhere Simple History starts tracking instantly after activation — no setup needed. It even imports recent activity so your log isn’t empty on day one. Access your log from: Dashboard widget – Activity stats summary and recent events Admin bar quick view – Dropdown with latest events on any admin page Command palette – Type “Simple History” to jump to the log for the current post Dedicated admin page – Full log with search, filters, and insights sidebar Email reports – Weekly summary delivered to your inbox RSS feed – Password-protected feed for your favorite reader WP-CLI – Command-line access for automation and scripting REST API – Programmatic access for custom integrations 📧 Weekly Email Reports – Stay Informed Without Logging In Weekly email reports deliver a summary of your site’s activity every Monday morning — total activity, daily breakdown, key metrics (logins, content updates, plugin changes), and direct links to the full log. Perfect for site owners, agencies managing client sites, and teams who need regular updates without logging in. Enable it in settings and see what the email looks like before turning it on. 🛠️ For Developers & Power Users WP-CLI – List, search, and export events from the command line — perfect for automation and managing multiple sites REST API – Full programmatic access to query the log and add custom events. See the documentation Logging API – Log your own events from themes and plugins with a single line of code RSS feed – Subscribe to changes using any feed reader AI & agent-friendly – The REST API and RSS feed make Simple History accessible to AI agents and automated workflows like Claude Code Stealth Mode – Run Simple History completely hidden from the admin interface via code; Premium adds a GUI. Ideal for agencies and client sites 🔆 Extend with Add-ons Simple History Premium Alerts & Notifications – Get notified instantly via Email, Slack, Discord, or Telegram when important events occur. Start quickly with preset rules for common scenarios or build custom rules filtered by event type, user, role, and log level. Log Forwarding – Stream events to external destinations: local log files, syslog servers (UDP/TCP/TLS), Datadog, Splunk, webhooks, or external MySQL/MariaDB databases. Perfect for centralized logging, compliance, and backup. Enhanced Controls – Custom retention periods (or keep logs forever), CSV/JSON export of filtered search results, post activity panel in the block editor, custom log entries for team decisions, stealth mode GUI, logger control to fine-tune which events are recorded, and an ad-free experience. WooCommerce Logger Track WooCommerce activity: orders, refunds, stock changes, product updates, pricing adjustments, settings modifications, and coupon usage. Debug and Monitor Monitor outgoing HTTP requests and emails, debug API calls, and see what’s happening under the hood. Essential for developers and support teams. 💚 Sponsor this project If you like this plugin please consider sponsoring the development of the free plugin. The plugin has been free for over 10 years and will continue to be free.