[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbAlvgDUa66_Tw8jZgq6TelnGaaibxkAhEDROoIA1IcU":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":15,"tags":18,"homepage":24,"download_link":25,"security_score":13,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":36,"analysis":143,"fingerprints":310},"bubo-insights","Bubo Insights — Self‑Hosted Privacy‑Friendly Analytics","1.0.16.5","pizza2mozzarella","https:\u002F\u002Fprofiles.wordpress.org\u002Fpizza2mozzarella\u002F","\u003Cp>\u003Cstrong>Bubo Insights\u003C\u002Fstrong> is a \u003Cstrong>self-hosted\u003C\u002Fstrong>, privacy friendly analytics tool designed for seamless monitoring of \u003Cstrong>website analytics\u003C\u002Fstrong>, traffic data, and outgoing clicks.\u003C\u002Fp>\n\u003Cp>Bubo Insights provides comprehensive website analytics data without the use of cookies, ensuring \u003Cstrong>privacy friendly\u003C\u002Fstrong> tracking and data ownership. Bubo Insights has a focus on in-website statistics, offering detailed stats and a \u003Cstrong>simple analytics dashboard\u003C\u002Fstrong>, making it an excellent analytics tool, for free.\u003C\u002Fp>\n\u003Cp>Whether you’re looking for privacy-first solutions or simple analytics, Bubo Insights has you covered.\u003C\u002Fp>\n\u003Ch3>Top Features in a nutshell\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Tracks Visitors, Page Visits, Referrers, and Outgoing Clicks\u003C\u002Fstrong>: Offers comprehensive website analytics to monitor user behavior, ensuring you get detailed stats and insights.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Easy to Install\u003C\u002Fstrong>: No coding or technical knowledge is required, making setup a breeze for all WordPress users looking for a simple analytics solution.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Embedded in Your WP Website Admin Dashboard\u003C\u002Fstrong>: Access all analytics directly from your WordPress dashboard for ease of use and real-time insights into your website stats.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Self-Hosted Data\u003C\u002Fstrong>: Ensures full data ownership with all data stored in your WordPress database, providing privacy friendly tracking and security.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Simple, Clean, and Responsive Analytics Dashboard\u003C\u002Fstrong>: User friendly interface for easy navigation and analysis, available both on desktop and mobile devices.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>No Cookie Banner Needed\u003C\u002Fstrong>: Provides cookieless tracking for privacy friendly analytics, eliminating the need for annoying cookie banners.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy Friendly\u003C\u002Fstrong>: Does not store personal user information, ensuring compliance with privacy regulations and maintaining user trust.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Privacy Friendly, Self-Hosted, No External Accounts, Unlimited Tracking\u003C\u002Fh3>\n\u003Cp>Understanding the need for privacy in today’s digital landscape, where privacy regulations are getting stricter, Bubo Insights offers the possibility to gather insightful website analytics and traffic data \u003Cstrong>without compromising user privacy\u003C\u002Fstrong>, thanks to its server-side tracking methods.\u003Cbr \u002F>\nBubo Insights believes in complete data ownership. \u003Cstrong>All website analytics data collected is stored in your WordPress database\u003C\u002Fstrong>, ensuring privacy-friendly tracking and security. There are no limits on the number of visits or visitors that can be recorded, offering unlimited tracking capabilities. However, it’s worth noting that very high data volumes could impact performance.\u003C\u002Fp>\n\u003Ch3>Analyze Key Core Metrics with an Intuitive Dashboard\u003C\u002Fh3>\n\u003Cp>Wondering how well your website is performing? Want to see if \u003Cstrong>real visitors\u003C\u002Fstrong> are engaging with your content and converting? Traditional analytics tools often require complex setups, numerous customizations, and confusing metrics, along with privacy concerns over cookie banners.\u003Cbr \u002F>\nWith Bubo Insights, you can access all the \u003Cstrong>core metrics\u003C\u002Fstrong> needed to optimize your website’s performance. The intuitive dashboard provides an at-a-glance overview of your site’s performance with detailed stats on Page Visits, Visitors, Referrers, Outgoing Clicks, and more.\u003Cbr \u002F>\nBubo Insights’ \u003Cstrong>Dashboard is designed to perform well both from desktop and mobile devices\u003C\u002Fstrong>, ensuring that your website analytics, privacy-friendly tracking, and traffic monitoring stats are always at your fingertips, providing real-time insights into your site visitors and traffic.\u003C\u002Fp>\n\u003Ch3>Simple to use Analytics Tool\u003C\u002Fh3>\n\u003Cp>One of the standout features of our plugin is its \u003Cstrong>simplicity\u003C\u002Fstrong>. Setup is straightforward, even for those with limited technical expertise. You just need to press Install, and you’re ready to gain insights into what people do on your website without compromising their privacy.\u003Cbr \u002F>\nOnce installed, \u003Cstrong>the plugin begins tracking immediately\u003C\u002Fstrong>, providing you with valuable data on website analytics and traffic monitoring without the need for complex configurations. The user-friendly interface ensures that you can access and understand your website statistics effortlessly, making it a truly simple analytics solution for all WordPress users.\u003Cbr \u002F>\nThis makes Bubo Insights a reliable analytics tool that provides all the essential features, including website stats and outgoing clicks, without the associated privacy concerns. In fact, the plethora of metrics that most of the analytics tools offers can sometimes be overwhelming, but this plugin simplifies the process, focusing on delivering the most critical data in an accessible user friendly format. This makes it \u003Cstrong>easier to make informed decisions about your website\u003C\u002Fstrong>‘s content and strategy, ensuring privacy-first website analytics and traffic monitoring.\u003C\u002Fp>\n\u003Ch3>Free plugin, no subscription needed!\u003C\u002Fh3>\n\u003Cp>Moreover, this simple analytics tool delivers all these valuable insights into user behavior for \u003Cstrong>free\u003C\u002Fstrong>! Despite being a free analytics solution, Bubo Insights offers a robust set of functionalities that everyone should enjoy in his\u002Fher website. This makes it an \u003Cstrong>ideal choice for small business owners\u003C\u002Fstrong>, bloggers, and anyone looking to keep an eye on their website’s performance, traffic monitoring, and data ownership without breaking the bank.\u003C\u002Fp>\n\u003Cp>In short, Bubo Insights is a powerful, free analytics plugin for WordPress that offers a privacy-friendly solution for tracking the traffic of your website. With its comprehensive analytics stats, simple setup, and complete data ownership, it’s the ideal solution for anyone looking to gain valuable insights into their website traffic while respecting visitor privacy.\u003Cbr \u002F>\nTry it today and take the first step towards a more transparent and privacy-friendly approach to website analytics and traffic monitoring!\u003C\u002Fp>\n","Bubo Insights: Privacy friendly WordPress plugin for self-hosted website analytics, traffic monitoring, and visitor tracking.",10,2439,100,1,"","6.8.5","6.0.0",[19,20,21,22,23],"analytics","cookieless-tracking","outgoing-clicks","privacy-friendly","self-hosted-analytics","https:\u002F\u002Fgithub.com\u002Fpizza2mozzarella\u002Fbubo_insights","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbubo-insights.1.0.16.5.zip",0,null,"2026-03-15T10:48:56.248Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":13,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},2,610,30,94,"2026-04-05T06:42:50.151Z",[37,61,82,104,126],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":48,"last_updated":49,"tested_up_to":50,"requires_at_least":51,"requires_php":52,"tags":53,"homepage":15,"download_link":57,"security_score":58,"vuln_count":31,"unpatched_count":26,"last_vuln_date":59,"fetched_at":60},"matomo","Matomo Analytics – Ethical Stats. Powerful Insights.","5.7.1","matomoteam","https:\u002F\u002Fprofiles.wordpress.org\u002Fmatomoteam\u002F","\u003Cp>\u003Cem>Already a Matomo On-Premise or Matomo Cloud user? You need to use the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-piwik\u002F\" rel=\"ugc\">Connect Matomo plugin\u003C\u002Fa> instead of this plugin.\u003C\u002Fem>\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Fpuxi_Ey0iLc?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>For all you WordPress website owners wanting an easier way to get customer insights to grow your business, you can now get the solution the professionals use, for free!\u003C\u002Fp>\n\u003Cp>Matomo Analytics is the #1 used Google Analytics alternative that offers a powerful range of features, security and protects the privacy of your users. This enables you to learn how to improve your website, make the right decisions for your business and stand out in the crowd in a safe and trustworthy way.\u003C\u002Fp>\n\u003Cp>Matomo’s mission is to give control and data ownership back to the user. By hosting web analytics on your own servers there’s no third-parties taking ownership, no on-selling of data and no-one looking in. This means when you install Matomo in a matter of a few clicks, you’re in full control.\u003C\u002Fp>\n\u003Cp>It’s also easier for you to get insights from Matomo Analytics with it’s time-saving interface design and out-of-the-box features, which require less manual configuration than Google Analytics.\u003C\u002Fp>\n\u003Cp>Matomo is free, secure and open – your ethical user insights platform.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>How Matomo Analytics for WordPress solves problems:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>100% data ownership, no one else can see your data\u003C\u002Fli>\n\u003Cli>All data is stored in your WordPress and not sent to any third party or different country\u003C\u002Fli>\n\u003Cli>Super easy to install. No coding or technical knowledge needed #nocode\u003C\u002Fli>\n\u003Cli>Free to use forever\u003C\u002Fli>\n\u003Cli>Designed to save you time as an out-of-box solution (including many Ecommerce stores)\u003C\u002Fli>\n\u003Cli>Protects the privacy of your users\u003C\u002Fli>\n\u003Cli>GDPR Manager\u003C\u002Fli>\n\u003Cli>No data sampling\u003C\u002Fli>\n\u003Cli>Opportunities to extend with an ever-growing marketplace\u003C\u002Fli>\n\u003Cli>Supports over 50 languages\u003C\u002Fli>\n\u003Cli>Comes equipped with Matomo Tag Manager\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>How Matomo focuses on privacy:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Superb user privacy protection\u003C\u002Fli>\n\u003Cli>Heaps of features to anonymize data and IP addresses\u003C\u002Fli>\n\u003Cli>WP shortcode to embed an opt-out feature into your website\u003C\u002Fli>\n\u003Cli>Features to export and delete data for GDPR\u003C\u002Fli>\n\u003Cli>Ability to configure data retention\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Ultimately, Matomo lets you:\u003C\u002Fstrong> learn who your customers are and their needs; understand what content works and how engaged your audience is; identify which marketing channels give you the highest ROI and invest with confidence in channels that convert for your business; and discover blockages and fix pain points for confused visitors to ensure they become satisfied customers.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features include:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Ecommerce features (supports WooCommerce, Easy Digital Downloads and MemberPress out of the box)\u003C\u002Fli>\n\u003Cli>Campaign tracking\u003C\u002Fli>\n\u003Cli>Visitor profiles\u003C\u002Fli>\n\u003Cli>Tag Manager\u003C\u002Fli>\n\u003Cli>Dashboards\u003C\u002Fli>\n\u003Cli>Segmentation\u003C\u002Fli>\n\u003Cli>Real time reports\u003C\u002Fli>\n\u003Cli>Transitions\u003C\u002Fli>\n\u003Cli>JavaScript error tracking\u003C\u002Fli>\n\u003Cli>Extensive geolocation reports \u002F maps\u003C\u002Fli>\n\u003Cli>Many different visualisations\u003C\u002Fli>\n\u003Cli>Row evolution\u003C\u002Fli>\n\u003Cli>Report comparisons\u003C\u002Fli>\n\u003Cli>Export features\u003C\u002Fli>\n\u003Cli>See the most drastic changes within a given time period\u003C\u002Fli>\n\u003Cli>Supports WP Rest API\u003C\u002Fli>\n\u003Cli>And hundreds of other features\u003C\u002Fli>\n\u003Cli>Easily give your colleagues access to your reports if \u002F when needed\u003C\u002Fli>\n\u003Cli>Easily exclude certain roles, visitors and pages from being tracked\u003C\u002Fli>\n\u003Cli>Supports WordPress Multisite. (Note: Tag Manager feature does not work in MultiSite.)\u003C\u002Fli>\n\u003Cli>Import historical data from Google Analytics or WP Statistics\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.matomo.org\u002Fpremium?wp=1\" rel=\"nofollow ugc\">Premium paid features:\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Heatmaps & Session Recordings\u003C\u002Fli>\n\u003Cli>Form Analytics\u003C\u002Fli>\n\u003Cli>Media Analytics\u003C\u002Fli>\n\u003Cli>Funnels\u003C\u002Fli>\n\u003Cli>SEO features – Keyword rankings\u003C\u002Fli>\n\u003Cli>Custom reporting\u003C\u002Fli>\n\u003Cli>Cohorts\u003C\u002Fli>\n\u003Cli>Users flow\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Prerequisites and technical requirements:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Running Matomo Analytics on your server can use significant resources. Whenever someone visits your WordPress website, your server will need to serve your WordPress pages to the user, as well as tracking the user journey in Matomo, resulting in an additional request for each page view.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>The minimum PHP memory limit is 128Mb, but we recommend to use a higher limit (memory_limit = 256M).\u003C\u002Fli>\n\u003Cli>PHP 7.2 at minimum is required.\u003C\u002Fli>\n\u003Cli>If you have high traffic website, or manage a lot of websites with WordPress MultiSite, we recommend installing \u003Ca href=\"https:\u002F\u002Fmatomo.org\u002Fdocs\u002Finstallation\u002F\" rel=\"nofollow ugc\">Matomo On-Premise\u003C\u002Fa> or signup to \u003Ca href=\"https:\u002F\u002Fmatomo.org\u002Fhosting\u002F\" rel=\"nofollow ugc\">Matomo Cloud\u003C\u002Fa> and install the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-piwik\u002F\" rel=\"ugc\">Connect Matomo plugin\u003C\u002Fa> instead.\u003C\u002Fli>\n\u003Cli>Needing to know more before you install? Have a \u003Ca href=\"https:\u002F\u002Fmatomo.org\u002Ffaq\u002Fwordpress\u002Fwhat-are-the-requirements-for-matomo-for-wordpress\u002F\" rel=\"nofollow ugc\">read through the most popular FAQs to ensure you’re making the right choice for you\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Over 1 million websites in over 190 countries are using Matomo already. Join the revolution too! Install Matomo on your WordPress website completely free and take back full control of your data!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Third party resources we use:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>After activating this plugin, it will download a Geolocation database (DBIP-City.mmdb) from \u003Ca href=\"https:\u002F\u002Fdb-ip.com\u002Fdb\u002Fdownload\u002Fip-to-city-lite?refid=mtm\" rel=\"nofollow ugc\">DB IP\u003C\u002Fa> into your uploads directory. The DB-IP database is distributed under the \u003Ca href=\"http:\u002F\u002Fcreativecommons.org\u002Flicenses\u002Fby\u002F4.0\u002F\" rel=\"nofollow ugc\">Creative Commons Attribution 4.0 International License\u003C\u002Fa>. This database is needed to detect the location of your visitors based on their IP.\u003C\u002Fli>\n\u003Cli>When you enter a URL in the SEO ranking widget, then a request with the entered URL may be sent to Google, Alexa, Bing, and other SEO providers.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>The entire Matomo team and everyone who contributed\u003C\u002Fli>\n\u003Cli>André Bräkling who is the Author of the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fbraekling\u002FWP-Matomo\" rel=\"nofollow ugc\">Connect Matomo plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Privacy friendly, GDPR compliant and self-hosted. Matomo is the #1 Google Analytics alternative that gives you control of your data. Free and secure.",100000,2588158,92,172,"2026-03-04T02:59:00.000Z","6.9.4","4.8","7.2.5",[19,54,55,56,22],"behavior","conversion","gdpr","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmatomo.5.7.1.zip",99,"2024-07-12 00:00:00","2026-03-15T15:16:48.613Z",{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":69,"downloaded":70,"rating":71,"num_ratings":72,"last_updated":73,"tested_up_to":16,"requires_at_least":74,"requires_php":75,"tags":76,"homepage":15,"download_link":80,"security_score":58,"vuln_count":31,"unpatched_count":26,"last_vuln_date":81,"fetched_at":60},"fathom-analytics","Fathom Analytics for WP","3.3.1","Conva Ventures","https:\u002F\u002Fprofiles.wordpress.org\u002Fconvaventures\u002F","\u003Cp>The best Google Analytics alternative for WordPress\u003C\u002Fp>\n\u003Cp>Fathom Analytics is a simple-to-use, privacy-focused (GDPR-compliant) website analytics tool for your WordPress site. You don’t have to edit the code in your WordPress template to start using our software.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fapp.usefathom.com\u002Fdemo\" rel=\"nofollow ugc\">Check out our live demo\u003C\u002Fa> or \u003Ca href=\"https:\u002F\u002Fapp.usefathom.com\u002Fregister\" rel=\"nofollow ugc\">sign up for a free 30-day trial\u003C\u002Fa>\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>You’ll need a \u003Ca href=\"https:\u002F\u002Fapp.usefathom.com\u002Fregister\" rel=\"nofollow ugc\">subscription\u003C\u002Fa> to Fathom Analytics to start collecting stats with this plugin, and our pricing starts at just $14\u002Fmonth. Instead of generating revenue from your visitors’ data, we charge a fair and sustainable price for all our plans. Our business model is privacy-first by design.\u003C\u002Fp>\n\u003Ch3>Why use Fathom Analytics?\u003C\u002Fh3>\n\u003Cp>Google Analytics is time-consuming to use and difficult to understand. Google also kills off its popular software far too often (like Universal Analytics). That’s why Fathom Analytics exists: to make website analytics easy and quick to understand.\u003C\u002Fp>\n\u003Cp>Thousands of customers, from governments and banks to small businesses and bloggers, trust their website analytics to Fathom.\u003C\u002Fp>\n\u003Ch3>Import from Google Analytics\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fusefathom.com\u002Ffeatures\u002Fga-importer\" rel=\"nofollow ugc\">We’ve got an importer\u003C\u002Fa> to save your UA (Universal Analytics) and GA4 data. Because we’ve got unlimited data retention, you can keep and view your stats forever.\u003C\u002Fp>\n\u003Ch3>Setup in minutes\u003C\u002Fh3>\n\u003Cp>Because Fathom Analytics is a \u003Ca href=\"https:\u002F\u002Fusefathom.com\u002Fdocs\u002Fscript\u002Fembed\" rel=\"nofollow ugc\">single line of code\u003C\u002Fa>, and our WordPress plugin doesn’t even require any coding, you can go from starting a trial to seeing real-time data within a few minutes. \u003Ca href=\"https:\u002F\u002Fusefathom.com\u002Fdocs\u002Fintegrations\u002Fwordpress\" rel=\"nofollow ugc\">Learn how to set up our plugin here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Comply with privacy laws\u003C\u002Fh3>\n\u003Cp>The best lawyers and legal minds worldwide regarding digital privacy have ensured that Fathom Analytics is fully compliant with \u003Ca href=\"https:\u002F\u002Fusefathom.com\u002Fcompliance\" rel=\"nofollow ugc\">GDPR, CCPA, ePrivacy, PECR and more\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>No cookie banners are required\u003C\u002Fh3>\n\u003Cp>We invented the now industry-standard method for anonymizing visitor data without using cookies. That means you don’t have to clutter your site or slow it down with cookie banner plugins or consent notices for your site’s analytics.\u003C\u002Fp>\n\u003Ch3>Email reports\u003C\u002Fh3>\n\u003Cp>Get a snapshot of your website or websites delivered to your inbox so you can see your critical stats without even having to log into Fathom Analytics. These reports can be set up for any dashboard (or all of them) and sent to anyone (at your company, to your clients, whomever you want).\u003C\u002Fp>\n\u003Ch3>Shared or private dashboards\u003C\u002Fh3>\n\u003Cp>Want to grant access to specific website dashboards for particular clients\u002Femployees? Or make your dashboard 100% public? Fathom Analytics lets you create private, public or passworded dashboards without needing an account.\u003C\u002Fp>\n\u003Ch3>More features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Simple options page within WordPress admin\u003C\u002Fli>\n\u003Cli>Ability to not track yourself or specific user roles with a single click\u003C\u002Fli>\n\u003Cli>Search within dashboard boxes\u003C\u002Fli>\n\u003Cli>Tiny, lightweight script that’s great for your SEO\u003C\u002Fli>\n\u003Cli>Dark mode\u003C\u002Fli>\n\u003Cli>All sites view to see all your sites at a glance\u003C\u002Fli>\n\u003Cli>And much more\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Setup this WordPress plugin\u003C\u002Fh3>\n\u003Cp>To learn how to quickly setup this plugin, \u003Ca href=\"https:\u002F\u002Fusefathom.com\u002Fdocs\u002Fintegrations\u002Fwordpress\" rel=\"nofollow ugc\">read our support doc\u003C\u002Fa>.\u003C\u002Fp>\n","Fathom is a simple, GDPR compliant Google Analytics alternative.",10000,101515,96,23,"2025-11-18T18:04:00.000Z","4.5","5.4",[19,77,78,22,79],"google-analytics","privacy","stats","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffathom-analytics.3.3.1.zip","2023-10-25 00:00:00",{"slug":83,"name":84,"version":85,"author":86,"author_profile":87,"description":88,"short_description":89,"active_installs":90,"downloaded":91,"rating":92,"num_ratings":93,"last_updated":94,"tested_up_to":50,"requires_at_least":95,"requires_php":96,"tags":97,"homepage":101,"download_link":102,"security_score":58,"vuln_count":14,"unpatched_count":26,"last_vuln_date":103,"fetched_at":60},"qa-heatmap-analytics","QA Assistants – Driven by data","5.1.3.0","QuarkA","https:\u002F\u002Fprofiles.wordpress.org\u002Fquarka\u002F","\u003Cp>QA Assistants goes beyond analytics — it’s a companion that helps your data speak, with Assistants that reveal insights you can act on.\u003C\u002Fp>\n\u003Cp>Each Assistant offers a unique way to look at your site — from quick overviews to social trends and growth insights.\u003Cbr \u002F>\nYou can still explore familiar tools like heatmaps, session replays, and reports — and Assistants will gradually bring more context to them.\u003C\u002Fp>\n\u003Cp>No complex setup or technical skills needed.\u003Cbr \u002F>\nQA Assistants makes discovering your site’s stories simple, visual, and a little fun too.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Ch3>Assistants — your data-driven companions to explore your site\u003C\u002Fh3>\n\u003Cp>Each Assistant offers a unique way to understand your site.\u003Cbr \u002F>\nFrom traffic overviews to social engagement or content insights, they highlight what truly matters — in plain words you can grasp.\u003Cbr \u002F>\nMore Assistants will keep joining, each bringing a new perspective to your data.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>New:\u003C\u002Fstrong> The built-in \u003Cstrong>Page Analysis Assistant\u003C\u002Fstrong> lets you view pageviews, key metrics, and device-specific heatmaps directly from the page you’re browsing — a lightweight, chatbot-style helper for logged-in admins.\u003C\u002Fp>\n\u003Ch3>Heatmaps & Session Replays — see how visitors behave\u003C\u002Fh3>\n\u003Cp>Visualize how people interact with your site: where they click, scroll, and pause.\u003Cbr \u002F>\nSession Replays let you follow their real journeys, helping you discover friction points and hidden opportunities.\u003C\u002Fp>\n\u003Ch3>Reports & Trends — your site at a glance\u003C\u002Fh3>\n\u003Cp>Access clear, intuitive charts and summaries that show what’s working and where to improve.\u003Cbr \u002F>\nSwitch to \u003Cstrong>Advanced Mode\u003C\u002Fstrong> to unlock detailed metrics and comparison tools.\u003C\u002Fp>\n\u003Ch3>Cookie-less Tracking — privacy made simple\u003C\u002Fh3>\n\u003Cp>Track user behavior responsibly.\u003Cbr \u002F>\nQA Assistants includes a cookie-less tracking mode, so you can comply with privacy rules without losing insight.\u003C\u002Fp>\n\u003Ch3>Built for WordPress — light, secure, and extendable\u003C\u002Fh3>\n\u003Cp>Designed to blend seamlessly with your dashboard.\u003Cbr \u002F>\nQA Assistants follows WordPress coding standards, loads only what’s needed, and supports modular extensions for future Assistants.\u003Cbr \u002F>\nAll of these features are completely free — just install and start exploring.\u003C\u002Fp>\n\u003Ch3>Important Notes\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>QA Assistants collects data in real time, but analytical reports are processed overnight.\u003Cbr \u002F>\nYou can see live visit counts immediately, while detailed insights (used by Assistants) become available the following day.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Please do not compress or minify JavaScript used by QA Assistants or WordPress.\u003Cbr \u002F>\nSome optimization plugins may interfere with tracking; exclude QA Assistants–related scripts if needed.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Make sure your PHP memory limit is sufficient for data processing.\u003Cbr \u002F>\nIf your server uses a very low limit (for example, 256 MB or less), some processes may fail.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>For detailed technical guidance or troubleshooting steps,\u003Cbr \u002F>\nplease see the \u003Ca href=\"https:\u002F\u002Fdocs.quarka.org\u002F\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa>.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","Let your data speak — assistants with different perspectives help you understand your site, alongside heatmaps and replays.",2000,50454,90,8,"2026-01-19T07:32:00.000Z","5.9","7.0",[19,98,99,100,22],"assistants","heatmap","insights","https:\u002F\u002Fquarka.org\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fqa-heatmap-analytics.5.1.3.0.zip","2024-10-09 00:00:00",{"slug":105,"name":106,"version":107,"author":108,"author_profile":109,"description":110,"short_description":111,"active_installs":112,"downloaded":113,"rating":13,"num_ratings":114,"last_updated":115,"tested_up_to":116,"requires_at_least":117,"requires_php":118,"tags":119,"homepage":124,"download_link":125,"security_score":13,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":60},"simpleanalytics","Simple Analytics","1.27","Adriaan","https:\u002F\u002Fprofiles.wordpress.org\u002Fsimpleanalytics\u002F","\u003Cp>Simple Analytics gives you the analytics you need without invading the privacy of your users, with a clean interface and simple integration.\u003C\u002Fp>\n\u003Col>\n\u003Cli>\u003Cstrong>Privacy-friendly by design\u003C\u002Fstrong>: Simple Analytics is built with privacy in mind. Get the insights you need while respecting your users’ privacy.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Simple interface\u003C\u002Fstrong>: Google Analytics is a monstrosity of custom dashboards and features. At Simple Analytics, we provide the insights you need in a clear and straightforward interface.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>No cookiebanner required\u003C\u002Fstrong>. Simple Analytics does not use cookies or any other identifiers, meaning you don’t need to add an annoying cookiebanner to your website. You can use Simple Analytics without the need for consent.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>GDPR-compliant\u003C\u002Fstrong>. Simple Analytics is GDPR-compliant and out-of-the-box since we don’t collect, store, or process personally identifiable information.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Easy integration\u003C\u002Fstrong>. Simple Analytics is easy to install. You can use our WordPress plugin to get started right away. It’s also possible to import your historical Google Analytics traffic so you don’t lose any data switching to Simple Analytics.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>It’s free\u003C\u002Fstrong>. Simple Analytics has a free option to get started. There is a 14-day free trial to explore our paid features. However, you can use Simple Analytics for free forever if you like.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Check our \u003Ca href=\"https:\u002F\u002Fdashboard.simpleanalytics.com\u002Fsimpleanalytics.com\" rel=\"nofollow ugc\">live demo\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Simple Analytics is entirely self-funded and proudly supported by our 18500+ users. We don’t sell your data, we don’t do ads, and we don’t have investors that tell us what to do. We’re here to build a product that you love.\u003C\u002Fp>\n\u003Cp>Use it for free as long as you need, or if you’re happy, consider one of our paid options for more features and more data history.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Events\u003C\u002Fstrong>\u003Cbr \u002F>\n–   Event Tracking: Monitor specific user interactions that are not captured by standard page views, such as button clicks, form submissions, or video plays.\u003C\u002Fp>\n\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Goals\u003C\u002Fstrong>\u003Cbr \u002F>\n–   Goal Tracking: Set specific goals to monitor user interactions on your website, such as conversions or engagement metrics.\u003Cbr \u002F>\n–   Goal Cards: Visual representations of your goals that allow for quick performance assessments.\u003Cbr \u002F>\n–   Custom Filters: Create filters to refine the data associated with each goal, making it easier to analyze specific user behaviors.\u003C\u002Fp>\n\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Ai Analytics\u003C\u002Fstrong>\u003Cbr \u002F>\n–   Chat with your analytics to generate custom insights and dashboards.\u003C\u002Fp>\n\u003Cp>\u003Ciframe loading=\"lazy\" title=\"ai-video-tool\" src=\"https:\u002F\u002Fplayer.vimeo.com\u002Fvideo\u002F1033359881?h=7e93b527ab&dnt=1&app_id=122963\" width=\"750\" height=\"469\" frameborder=\"0\" allow=\"autoplay; fullscreen; picture-in-picture; clipboard-write; encrypted-media\">\u003C\u002Fiframe>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Custom Views\u003C\u002Fstrong>\u003Cbr \u002F>\n–   Permanent Filters: Establish permanent filters on your dashboard to focus on specific data sets.\u003Cbr \u002F>\n–   Multi-Domain Merging: Combine data from multiple domains into a single dashboard for a comprehensive overview.\u003Cbr \u002F>\n–   Access Control: Share limited views of your analytics data with team members or stakeholders.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Filters\u003C\u002Fstrong>\u003Cbr \u002F>\n–   Data Filtering: Apply filters to exclude certain traffic sources or user behaviors, allowing for cleaner, more relevant data analysis.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Export Your Data\u003C\u002Fstrong>\u003Cbr \u002F>\n–   Data Export Options: Easily export your analytics data in various formats for further analysis or reporting.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Import Google Analytics Data\u003C\u002Fstrong>\u003Cbr \u002F>\n–   Data Migration: Import historical data from Google Analytics to maintain continuity in your analytics tracking.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Email Reports\u003C\u002Fstrong>\u003Cbr \u002F>\n–   Automated Reporting: Set up automated email reports to receive regular updates on your website’s performance metrics.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Bypass Ad-Blockers\u003C\u002Fstrong>\u003Cbr \u002F>\n–   Ad-Blocker Resilience: The tracking script is designed to bypass common ad-blockers, ensuring that you capture more accurate visitor data.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Robot Blocking\u003C\u002Fstrong>\u003Cbr \u002F>\n–   Bot Traffic Management: Automatically block known bots from skewing your analytics data, leading to more reliable insights.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Hide Referral SPAM\u003C\u002Fstrong>\u003Cbr \u002F>\n–   Spam Filtering: Filter out referral spam to ensure that your analytics data reflects genuine user interactions.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Embed Chart on Your Site\u003C\u002Fstrong>\u003Cbr \u002F>\n–   Data Visualization: Embed analytics charts directly on your website for live data displays, enhancing transparency.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Trend Lines\u003C\u002Fstrong>\u003Cbr \u002F>\n–   Performance Tracking: Utilize trend lines in your analytics to visualize performance over time, aiding in identifying patterns and forecasting.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Annotations\u003C\u002Fstrong>\u003Cbr \u002F>\n–   Event Marking: Add annotations to your data to mark significant events or changes, providing context for fluctuations in your analytics.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Block Your Visits Extension\u003C\u002Fstrong>\u003Cbr \u002F>\n–   Personal Visit Exclusion: Use an extension to block your own visits from being tracked, ensuring that your analytics reflect genuine user activity.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>iOS App\u003C\u002Fstrong>\u003Cbr \u002F>\n–   Mobile Access: Access your analytics data on the go with a dedicated iOS app, allowing for real-time insights wherever you are.\u003C\u002Fp>\n","Simple, free, and privacy-friendly website analytics https:\u002F\u002Fvimeo.com\u002F1033359807\u002Fdde00e7f39",1000,22172,3,"2026-03-09T08:15:00.000Z","6.7.5","5.2.0","7.2.0",[120,22,121,122,123],"free-analytics","privacy-first","simple-analytics","website-analytics","https:\u002F\u002Fdocs.simpleanalytics.com\u002Finstall-simple-analytics-on-wordpress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimpleanalytics.1.99.zip",{"slug":127,"name":128,"version":129,"author":130,"author_profile":131,"description":132,"short_description":133,"active_installs":33,"downloaded":134,"rating":26,"num_ratings":26,"last_updated":135,"tested_up_to":50,"requires_at_least":136,"requires_php":137,"tags":138,"homepage":15,"download_link":142,"security_score":13,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":60},"easy-media-statistics","Easy Media Statistics","1.0.8","Jürgen Müller","https:\u002F\u002Fprofiles.wordpress.org\u002Fjuergen74\u002F","\u003Cp>Easy Media Statistics, a solution for tracking and analyzing audio and video engagement on your website. With this plugin, you’ll gain valuable insights into how visitors interact with your media content, including daily play statistics, in-depth analysis of each file, and a top ten of the most played media. Take advantage of the autoplay feature to create an immersive experience for your audience. Note that this plugin only tracks audio and video files hosted directly on your website – it does not support embedded content from third-party sources like YouTube or Vimeo (after all, you can already access those statistics through their respective platforms).\u003C\u002Fp>\n\u003Ch3>Media Insights and Analytics\u003C\u002Fh3>\n\u003Cp>Get valuable insights into how your website visitors engage with audio and video content. This plugin provides detailed statistics on which days specific media files were played, including information on which parts of each file were most popular.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Daily Play Statistics:\u003C\u002Fstrong> See when and how often individual media files are being played.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>In-Depth Media Analysis:\u003C\u002Fstrong> Discover which sections of your audio or video files are the most engaging for your audience.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Top Ten Most Played Media:\u003C\u002Fstrong> Identify the most popular content on your website.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Dashboard Widget\u003C\u002Fh3>\n\u003Cp>Stay up-to-date with how many clients have engaged with your media since your last logout. The dashboard widget provides a quick glance at:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Total Views and Plays:\u003C\u002Fstrong> See how many users have watched or listened to your audio\u002Fvideo files.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Up-to-date:\u003C\u002Fstrong> Get notified as new views and plays are recorded.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Settings\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Autoplay Feature:\u003C\u002Fstrong> Take advantage of our autoplay feature and let visitors seamlessly transition from one media file to another when they reach the end of their current selection. Perfect for creating an immersive experience on your website!\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Tracking option:\u003C\u002Fstrong> Choose when you want to track only logged-out users or everyone.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Privacy-friendly\u003C\u002Fh3>\n\u003Cp>Easy Media Statistics does not set any cookies and is not storing any private data. Instead, it uses a unique MD5 hash of each visitor’s IP address to track engagement anonymously – giving you the insights you need without compromising user privacy.\u003C\u002Fp>\n\u003Cp>With these features, you’ll gain a deeper understanding of how your audience interacts with your audio and video content, allowing you to optimize your strategy and improve engagement.\u003C\u002Fp>\n","Get detailed insights into visitors behavior when they listen to audio or view videos on your site - privacy-friendly.",677,"2025-12-23T11:10:00.000Z","6.2","7.2",[19,139,22,140,141],"media","statistics","tracking","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-media-statistics.1.0.8.zip",{"attackSurface":144,"codeSignals":225,"taintFlows":247,"riskAssessment":297,"analyzedAt":309},{"hooks":145,"ajaxHandlers":195,"restRoutes":221,"shortcodes":222,"cronEvents":223,"entryPointCount":224,"unprotectedCount":224},[146,152,156,158,162,166,171,175,179,182,186,190],{"type":147,"name":148,"callback":149,"file":150,"line":151},"action","after_uninstall","bubo_insights_fs_uninstall_cleanup","bubo-insights.php",68,{"type":147,"name":153,"callback":154,"priority":14,"file":150,"line":155},"wp_enqueue_scripts","bubo_insights_enqueue_wp_jquery_min",85,{"type":147,"name":153,"callback":157,"file":150,"line":13},"bubo_insights_tracking_scripts",{"type":147,"name":159,"callback":160,"file":150,"line":161},"admin_enqueue_scripts","bubo_insights_admin_styles",168,{"type":147,"name":163,"callback":164,"file":150,"line":165},"admin_init","bubo_insights_hide_all_admin_notices",176,{"type":167,"name":168,"callback":169,"file":150,"line":170},"filter","admin_footer_text","bubo_insights_footer_admin",177,{"type":147,"name":172,"callback":172,"priority":173,"file":150,"line":174},"bubo_insights_navbar",11,205,{"type":147,"name":176,"callback":177,"priority":173,"file":150,"line":178},"admin_menu","bubo_insights_main_page",224,{"type":147,"name":176,"callback":180,"priority":173,"file":150,"line":181},"bubo_insights_livestats_page",238,{"type":147,"name":176,"callback":183,"priority":184,"file":150,"line":185},"bubo_insights_handbook_page",19,252,{"type":147,"name":176,"callback":187,"priority":188,"file":150,"line":189},"bubo_insights_settings_page",20,266,{"type":147,"name":191,"callback":192,"file":193,"line":194},"wp_body_open","bubo_insights_tracking_nonce","includes\\tracking_engine.php",7,[196,201,205,209,213,217],{"action":197,"nopriv":198,"callback":199,"hasNonce":198,"hasCapCheck":198,"file":150,"line":200},"bubo_insights_livestats_query",false,"bubo_insights_livestats_query_callback",284,{"action":202,"nopriv":198,"callback":203,"hasNonce":198,"hasCapCheck":198,"file":150,"line":204},"bubo_insights_livestats_defaults","bubo_insights_livestats_defaults_callback",323,{"action":206,"nopriv":198,"callback":207,"hasNonce":198,"hasCapCheck":198,"file":150,"line":208},"bubo_insights_liverecords_query","bubo_insights_liverecords_query_callback",337,{"action":210,"nopriv":198,"callback":211,"hasNonce":198,"hasCapCheck":198,"file":150,"line":212},"bubo_insights_drop_all_tables","bubo_insights_drop_all_tables_callback",359,{"action":214,"nopriv":198,"callback":215,"hasNonce":198,"hasCapCheck":198,"file":193,"line":216},"bubo_insights_event_log","bubo_insights_loggedin_event_log_callback",28,{"action":214,"nopriv":218,"callback":219,"hasNonce":198,"hasCapCheck":198,"file":193,"line":220},true,"bubo_insights_loggedout_event_log_callback",29,[],[],[],6,{"dangerousFunctions":226,"sqlUsage":227,"outputEscaping":229,"fileOperations":26,"externalRequests":26,"nonceChecks":26,"capabilityChecks":26,"bundledLibraries":242},[],{"prepared":184,"raw":26,"locations":228},[],{"escaped":230,"rawEcho":231,"locations":232},154,4,[233,237,239,241],{"file":234,"line":235,"context":236},"admin\\partials\\livestats-ajax.php",523,"raw output",{"file":150,"line":238,"context":236},319,{"file":150,"line":240,"context":236},355,{"file":193,"line":185,"context":236},[243],{"name":244,"version":245,"knownCves":246},"Freemius","1.0",[],[248,271,283],{"entryPoint":249,"graph":250,"unsanitizedCount":31,"severity":270},"\u003Csettings> (admin\\partials\\settings.php:0)",{"nodes":251,"edges":267},[252,257,261],{"id":253,"type":254,"label":255,"file":256,"line":173},"n0","source","$_GET (x2)","admin\\partials\\settings.php",{"id":258,"type":259,"label":260,"file":256,"line":173},"n1","transform","→ bubo_insights_export_csv()",{"id":262,"type":263,"label":264,"file":150,"line":265,"wp_function":266},"n2","sink","header() [Header Injection]",390,"header",[268,269],{"from":253,"to":258,"sanitized":198},{"from":258,"to":262,"sanitized":198},"medium",{"entryPoint":272,"graph":273,"unsanitizedCount":14,"severity":270},"bubo_insights_livestats_defaults_callback (bubo-insights.php:285)",{"nodes":274,"edges":281},[275,278],{"id":253,"type":254,"label":276,"file":150,"line":277},"$_REQUEST",288,{"id":258,"type":263,"label":279,"file":150,"line":238,"wp_function":280},"echo() [XSS]","echo",[282],{"from":253,"to":258,"sanitized":198},{"entryPoint":284,"graph":285,"unsanitizedCount":31,"severity":270},"\u003Cbubo-insights> (bubo-insights.php:0)",{"nodes":286,"edges":294},[287,288,289,292],{"id":253,"type":254,"label":276,"file":150,"line":277},{"id":258,"type":263,"label":279,"file":150,"line":238,"wp_function":280},{"id":262,"type":254,"label":290,"file":150,"line":291},"$_SERVER",384,{"id":293,"type":263,"label":264,"file":150,"line":265,"wp_function":266},"n3",[295,296],{"from":253,"to":258,"sanitized":198},{"from":262,"to":293,"sanitized":198},{"summary":298,"deductions":299},"The \"bubo-insights\" plugin v1.0.16.5 exhibits a concerning security posture primarily due to a significant number of unprotected AJAX handlers. While the plugin demonstrates good practices in other areas, such as using prepared statements for all SQL queries and properly escaping almost all output, the lack of authentication on six AJAX entry points represents a substantial risk. This means that any unauthenticated user could potentially trigger these AJAX actions, leading to unintended consequences or unauthorized operations if the functionality is sensitive.\n\nThe static analysis also revealed three taint flows with unsanitized paths. While classified as having no critical or high severity, the presence of unsanitized paths indicates potential avenues for injection attacks, especially when combined with unprotected AJAX endpoints. The absence of any recorded vulnerability history is a positive sign, suggesting that the plugin's authors may be diligent in addressing past issues or that the current version has not been a target. However, this lack of history should not be relied upon as a guarantee of future security, especially given the identified vulnerabilities in the code itself.\n\nIn conclusion, the \"bubo-insights\" plugin has strengths in its handling of database queries and output sanitization. However, the critical weakness lies in its unprotected AJAX endpoints and the presence of unsanitized paths in taint flows. These issues create a significant attack surface that requires immediate attention to prevent potential exploitation. The absence of past CVEs is a positive, but the current code analysis reveals immediate risks that need mitigation.",[300,302,305,307],{"reason":301,"points":11},"Unprotected AJAX handlers",{"reason":303,"points":304},"Taint flows with unsanitized paths",5,{"reason":306,"points":304},"No nonce checks on AJAX handlers",{"reason":308,"points":304},"No capability checks on AJAX handlers","2026-03-16T23:11:37.157Z",{"wat":311,"direct":326},{"assetPaths":312,"generatorPatterns":318,"scriptPaths":319,"versionParams":320},[313,314,315,316,317],"\u002Fwp-content\u002Fplugins\u002Fbubo-insights\u002Fadmin\u002Fcss\u002Fadmin.css","\u002Fwp-content\u002Fplugins\u002Fbubo-insights\u002Fadmin\u002Fjs\u002Fadmin.js","\u002Fwp-content\u002Fplugins\u002Fbubo-insights\u002Fadmin\u002Fjs\u002Flivestats.js","\u002Fwp-content\u002Fplugins\u002Fbubo-insights\u002Fadmin\u002Fjs\u002Fhandbook.js","\u002Fwp-content\u002Fplugins\u002Fbubo-insights\u002Fadmin\u002Fjs\u002Fsettings.js",[],[314,315,316,317],[321,322,323,324,325],"bubo_insights_admin_style","bubo_insights_admin_script","bubo_insights_livestats_script","bubo_insights_handbook_script","bubo_insights_settings_script",{"cssClasses":327,"htmlComments":328,"htmlAttributes":329,"restEndpoints":330,"jsGlobals":331,"shortcodeOutput":332},[],[],[],[],[],[]]