WP-Safety

CMWP-Analytics Security & Risk Analysis

wordpress.org/plugins/cmwp-analytics

Universal Analytics Integration mit anonymizeIp und Opt-Out

100 active installs v0.4 PHP + WP 4.7+ Updated Nov 16, 2017
analyticsanonymizeipcross-domainopt-outtracking
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is CMWP-Analytics Safe to Use in 2026?

Generally Safe

Score 85/100

CMWP-Analytics has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago
Risk Assessment

The cmwp-analytics plugin v0.4 exhibits a generally good security posture based on the static analysis. It does not appear to have any reported vulnerabilities or CVEs, which is a strong positive indicator. The plugin also demonstrates good practices by avoiding dangerous functions, performing all SQL queries using prepared statements, and having no file operations or external HTTP requests. The limited attack surface of only one shortcode entry point, without any identified unprotected handlers, is also reassuring.

Key Concerns

  • Output escaping is only 47% proper
  • No nonce checks implemented
  • Limited capability checks relative to entry points
Vulnerabilities
None known

CMWP-Analytics Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

CMWP-Analytics Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
8
7 escaped
Nonce Checks
0
Capability Checks
3
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

47% escaped15 total outputs
Attack Surface

CMWP-Analytics Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[cmwp-analytics-opt-out] includes\class-cmwp-analytics-frontend.php:44
WordPress Hooks 8
actioninitcmwp-analytics.php:117
actionadmin_initcmwp-analytics.php:118
actioninitincludes\class-cmwp-analytics-frontend.php:41
actioninitincludes\class-cmwp-analytics-frontend.php:42
actionwp_headincludes\class-cmwp-analytics-frontend.php:52
actioninitincludes\class-cmwp-analytics-options.php:46
actionadmin_menuincludes\class-cmwp-analytics-options.php:48
actionadmin_initincludes\class-cmwp-analytics-options.php:49
Maintenance & Trust

CMWP-Analytics Maintenance & Trust

Maintenance Signals

WordPress version tested4.8.28
Last updatedNov 16, 2017
PHP min version
Downloads3K

Community Trust

Rating100/100
Number of ratings2
Active installs100
Alternatives

CMWP-Analytics Alternatives

GA Google Analytics – Connect Google Analytics to WordPress

GA Google Analytics – Connect Google Analytics to WordPress

ga-google-analytics

A
100

Adds Google Analytics tracking code to your WordPress site. Supports many tracking features.

400K No CVEs
Metricool

Metricool

metricool

A
100

Metricool is the first tool designed to measure #Blog impact and #SocialMedia activity.

80K 1 CVE
SlimStat Analytics

SlimStat Analytics

wp-slimstat

A
88

The leading web analytics plugin for WordPress

80K 23 CVEs
Connect Matomo – Analytics Dashboard for WordPress

Connect Matomo – Analytics Dashboard for WordPress

wp-piwik

A
97

Adds Matomo (former Piwik) statistics to your WordPress dashboard and is also able to add the Matomo Tracking Code to your blog.

60K 5 CVEs
Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing

Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing

woocommerce-google-adwords-conversion-tracking-tag

A
95

Conversion tracking for WooCommerce. Google Ads, GA4, Meta/Facebook Pixel, TikTok & more. Recover 30% more conversions with server-side tracking!

50K 4 CVEs
Developer Profile

CMWP-Analytics Developer Profile

Peter Sentner

1 plugin · 100 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect CMWP-Analytics

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/cmwp-analytics/templates/tracking-snippet/google-analytics-universal.php

HTML / DOM Fingerprints

HTML Comments
<!-- CMWP Analytics: Es wurde noch keine Google Analytics Tracking-ID eingeben! (UA-xxxxxxxx-x) --><!-- CMWP Analytics: Die Ausgabe des Google Analytics Tracking Code wurde in den Einstellungen deaktiviert! --><!-- Google Analytics OptOut ist deaktivert! -->
Shortcode Output
<a href="javascript:gaOptOut();">Google Analytics deaktivieren</a>
FAQ

Frequently Asked Questions about CMWP-Analytics