[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feeuzEtnmJaleAbo7UaeSTgTEzijcAAeAUpDrL7aID0A":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":60,"crawl_stats":37,"alternatives":66,"analysis":175,"fingerprints":365},"download-counter","Download Counter","1.4","Anatoly","https:\u002F\u002Fprofiles.wordpress.org\u002Fanatolyk\u002F","\u003Cp>Using this plugin, you will get file download statistics.\u003C\u002Fp>\n\u003Cp>Use the shortcode \u003Ccode>[download_counter_url name='file_name']\u003C\u002Fcode> – to get the link.\u003C\u002Fp>\n\u003Cp>Use the shortcode \u003Ccode>[download_counter_count name='file_name']\u003C\u002Fcode> – to get the number of downloads.\u003C\u002Fp>\n\u003Cp>Use the shortcode \u003Ccode>[download_counter_size name='file_name']\u003C\u002Fcode> – to get the size.\u003C\u002Fp>\n\u003Cp>Use the shortcode \u003Ccode>[download_counter_date name='file_name' format='date_format']\u003C\u002Fcode> – to get the date of the last download.\u003C\u002Fp>\n\u003Cp>Visit the plugin settings to specify the path to the directory with files.\u003C\u002Fp>\n\u003Cp>Then use the shortcode to display the download link or the shortcode to display the number of downloads in any post or page.\u003C\u002Fp>\n\u003Cp>The plugin will then count each successful download and display the statistics in the plugin settings.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Simple counter of successful downloads\u003C\u002Fli>\n\u003Cli>Recording statistics to a local database\u003C\u002Fli>\n\u003Cli>Path to the directory with files – anywhere on the server\u003C\u002Fli>\n\u003Cli>Output of download statistics in the settings\u003C\u002Fli>\n\u003Cli>Lightweight – the entire plugin size is \u003C 100 KB\u003C\u002Fli>\n\u003Cli>Super fast and designed for optimal performance\u003C\u002Fli>\n\u003Cli>Clean code\u003C\u002Fli>\n\u003C\u002Ful>\n","Counts the number of downloads for files and displays a table with the results.",30,1057,0,"2025-08-04T12:32:00.000Z","6.7.5","","5.6.8",[19,20,21,22,23],"analytics","count-downloads","counter","statistic-downloads","statistics","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdownload-counter","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdownload-counter.1.4.zip",74,2,1,"2025-08-04 18:57:59","2026-03-15T15:16:48.613Z",[32,46],{"id":33,"url_slug":34,"title":35,"description":36,"plugin_slug":4,"theme_slug":37,"affected_versions":38,"patched_in_version":6,"severity":39,"cvss_score":40,"cvss_vector":41,"vuln_type":42,"published_date":29,"updated_date":43,"references":44,"days_to_patch":28},"CVE-2025-8294","download-counter-authenticated-contributor-stored-cross-site-scripting-via-name-parameter","Download Counter \u003C= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via name Parameter","The Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=1.3","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-08-05 07:24:16",[45],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F9fcf7936-8a28-45b9-a9dc-fd7257a83a84?source=api-prod",{"id":47,"url_slug":48,"title":49,"description":50,"plugin_slug":4,"theme_slug":37,"affected_versions":51,"patched_in_version":37,"severity":52,"cvss_score":53,"cvss_vector":54,"vuln_type":55,"published_date":56,"updated_date":57,"references":58,"days_to_patch":37},"CVE-2025-60242","download-counter-unauthenticated-arbitrary-file-read","Download Counter \u003C= 1.4 - Unauthenticated Arbitrary File Read","The Download Counter plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.4. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.","\u003C=1.4","high",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N","Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","2025-06-22 00:00:00","2025-11-11 17:24:59",[59],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fcd9eb6e5-5566-4a11-bcca-26c166a5b4c5?source=api-prod",{"slug":61,"display_name":7,"profile_url":8,"plugin_count":27,"total_installs":62,"avg_security_score":63,"avg_patch_time_days":28,"trust_score":64,"computed_at":65},"anatolyk",50,80,86,"2026-04-05T08:13:52.608Z",[67,90,113,133,155],{"slug":68,"name":69,"version":70,"author":71,"author_profile":72,"description":73,"short_description":74,"active_installs":75,"downloaded":76,"rating":77,"num_ratings":78,"last_updated":79,"tested_up_to":80,"requires_at_least":81,"requires_php":82,"tags":83,"homepage":86,"download_link":87,"security_score":88,"vuln_count":27,"unpatched_count":13,"last_vuln_date":89,"fetched_at":30},"post-views-counter","Post Views Counter","1.7.8","dFactory","https:\u002F\u002Fprofiles.wordpress.org\u002Fdfactory\u002F","\u003Cp>Post Views Counter allows you to collect and display how many times a post, page, or other content has been viewed in a simple, fast and reliable way.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpostviewscounter.com\u002F\" rel=\"nofollow ugc\">Post Views Counter\u003C\u002Fa> gives you clear, accurate post view stats — right inside WordPress. No external tools. No bloat. Just the numbers you need to see what’s working.\u003C\u002Fp>\n\u003Ch4>Key Benefits\u003C\u002Fh4>\n\u003Cp>Clarity, speed, and control:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Clear, Focused Metrics\u003C\u002Fstrong> — You get a clear picture of how your posts are performing.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Made for WordPress\u003C\u002Fstrong> — Runs entirely in your site. No GA, no third-party pipes; accurate counts in your Dashboard.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy-first\u003C\u002Fstrong> — Data lives on your server, with controls that respect visitors’ rights and privacy regulations.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Works at scale\u003C\u002Fstrong> — Minimal overhead, no external scripts, Multisite-ready.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Display anywhere\u003C\u002Fstrong> — Automatically show counts, or place them exactly where you want via blocks or shortcode.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cp>Practical features that matter:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Count & display views for \u003Cstrong>any post type\u003C\u002Fstrong> you select.\u003C\u002Fli>\n\u003Cli>Three counting modes: \u003Cstrong>PHP, JavaScript, REST API\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Dashboard post views \u003Cstrong>stats widget\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Sortable Post Views \u003Cstrong>admin column\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Exclude bots, logged-in users, specific roles, or IPs\u003C\u002Fli>\n\u003Cli>Manually adjust a post’s views when needed.\u003C\u002Fli>\n\u003Cli>Query and \u003Cstrong>order content by views\u003C\u002Fstrong> (developer-friendly)\u003C\u002Fli>\n\u003Cli>Custom REST API endpoints\u003C\u002Fli>\n\u003Cli>Option to set count interval\u003C\u002Fli>\n\u003Cli>One-click data import from \u003Cstrong>WP-PostViews\u003C\u002Fstrong>, \u003Cstrong>Statify\u003C\u002Fstrong> and \u003Cstrong>Page Views Count\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Post views \u003Cstrong>display position\u003C\u002Fstrong>, automatic or manual via shortcode\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multisite\u003C\u002Fstrong> compatibile\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WPML\u002FPolylang\u003C\u002Fstrong> compatible; translation-ready (.pot)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Post Views Counter Pro\u003C\u002Fh4>\n\u003Cp>More capability without extra complexity:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Fast AJAX counting\u003C\u002Fstrong> for more accurate data.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Caching optimization\u003C\u002Fstrong> that guarantees performance even under heavy traffic.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Reports\u003C\u002Fstrong>: Views by Date, Post, Author to spot winners, trends, and top contributors.\u003C\u002Fli>\n\u003Cli>Customizable \u003Cstrong>Views Period\u003C\u002Fstrong> (e.g., last 7\u002F30 days) to control the views count timeframe.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Export to CSV\u002FXML\u003C\u002Fstrong> to download and share data.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Integrations\u003C\u002Fstrong> for ordering by views in popular builders (e.g., \u003Cstrong>Elementor Pro, Divi, GenerateBlocks\u003C\u002Fstrong>).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpostviewscounter.com\u002Fpricing\u002F\" rel=\"nofollow ugc\">Learn more about Pro \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan>\u003C\u002Fa>\u003C\u002Fp>\n","Post Views Counter allows you to collect and display how many times a post, page, or other content has been viewed in a simple, fast and reliable way.",200000,5127428,98,1194,"2026-03-10T10:56:00.000Z","6.9.4","6.3.0","7.0",[19,21,84,85,23],"pageviews","postviews","https:\u002F\u002Fpostviewscounter.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpost-views-counter.1.7.8.zip",99,"2024-04-05 00:00:00",{"slug":91,"name":92,"version":93,"author":94,"author_profile":95,"description":96,"short_description":97,"active_installs":98,"downloaded":99,"rating":100,"num_ratings":101,"last_updated":102,"tested_up_to":80,"requires_at_least":103,"requires_php":16,"tags":104,"homepage":16,"download_link":109,"security_score":110,"vuln_count":111,"unpatched_count":13,"last_vuln_date":112,"fetched_at":30},"visitors-traffic-real-time-statistics","Visitor Traffic Real Time Statistics","8.5","wp-buy","https:\u002F\u002Fprofiles.wordpress.org\u002Fwp-buy\u002F","\u003Cp>\u003Cstrong>Visitor Traffic Real-Time Statistics for WordPress\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Unlock powerful insights into your website traffic with\u003Cstrong>Visitor Traffic Real-Time Statistics\u003C\u002Fstrong>, the ultimate WordPress plugin for tracking visitors, visits, browsers, operating systems, and more — all in one intuitive dashboard.\u003C\u002Fp>\n\u003Cp>With real-time data and easy-to-use shortcodes, you’ll get a complete picture of your site’s performance without the complexity. Whether you’re a blogger, business owner, or marketer, this plugin gives you the tools to understand your audience better and make smarter decisions.\u003C\u002Fp>\n\u003Ch3>\u003Cstrong>Why Choose Visitor Traffic Real-Time Statistics?\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Real-Time Visitor Tracking:\u003C\u002Fstrong> See who’s visiting your site and when — in real-time.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>User-Friendly Dashboard:\u003C\u002Fstrong> All your key insights are displayed on a single, easy-to-navigate dashboard.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Comprehensive Analytics:\u003C\u002Fstrong> Track visitors by country, device, browser, operating system, referrer, and more.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shortcode Integration:\u003C\u002Fstrong> Display visitor stats anywhere on your site with simple shortcodes.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>SEO Insights:\u003C\u002Fstrong> Monitor keywords, search engine referrals, and traffic sources to improve your SEO performance.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Available Shortcodes (Simple & Flexible)\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cp>Add these shortcodes to any post, page, or widget to showcase your traffic stats:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>[ahc_stats_widget]\u003C\u002Fcode> – Display a site-wide statistics widget on the front end.  \u003C\u002Fli>\n\u003Cli>\u003Ccode>[ahc_stats_widget title=\"Your Title\" fontsize=\"16\" display_today_visitors=true display_total_visitors=true]\u003C\u002Fcode> – Customize the widget with your own parameters.  \u003C\u002Fli>\n\u003Cli>\u003Ccode>[ahc_today_visitors]\u003C\u002Fcode> – Display today’s visitors.  \u003C\u002Fli>\n\u003Cli>\u003Ccode>[ahc_today_visits]\u003C\u002Fcode> – Display today’s page views.  \u003C\u002Fli>\n\u003Cli>\u003Ccode>[ahc_total_visitors]\u003C\u002Fcode> – Show your all-time visitor count.  \u003C\u002Fli>\n\u003Cli>\u003Ccode>[ahc_total_visits]\u003C\u002Fcode> – Display total visits to your site.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Free Version Features:\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Real-time visitor tracking and stats.  \u003C\u002Fli>\n\u003Cli>Insights into browsers, countries, hits, referrals, and searches.  \u003C\u002Fli>\n\u003Cli>Track daily, weekly, and monthly visitor trends.  \u003C\u002Fli>\n\u003Cli>Shortcodes to display key stats on your site.  \u003C\u002Fli>\n\u003Cli>Track top referring websites and keywords.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Upgrade to Pro for Even More Power!\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cp>Take your analytics to the next level with\u003Cstrong>Visitor Traffic Real-Time Statistics Pro\u003C\u002Fstrong>:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Multisite Support:\u003C\u002Fstrong> Track traffic across multiple sites in one place.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Live User Tracking:\u003C\u002Fstrong> See how many people are online right now.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Interactive Google Maps:\u003C\u002Fstrong> Visualize visitor locations globally.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Advanced Page Tracking:\u003C\u002Fstrong> Identify your most popular posts and pages.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Detailed Visit Graphs:\u003C\u002Fstrong> Analyze visitor activity by the hour.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Advanced SEO Insights:\u003C\u002Fstrong> Discover the keywords driving traffic to your site.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable Reports:\u003C\u002Fstrong> Get actionable insights with easy-to-read reports.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Who Can Benefit?\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Bloggers who want to track reader engagement.  \u003C\u002Fli>\n\u003Cli>E-commerce store owners looking to understand customer behavior.  \u003C\u002Fli>\n\u003Cli>Marketers seeking to optimize SEO strategies.  \u003C\u002Fli>\n\u003Cli>Website administrators who need detailed traffic analysis.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Get Started Today!\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Install the plugin now\u003C\u002Fstrong> to gain valuable insights into your site traffic and grow your online presence.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.wp-buy.com\u002Fproduct\u002Fvisitors-traffic-real-time-statistics-pro\u002F#gopro\" rel=\"nofollow ugc\">Go PRO Now\u003C\u002Fa>\u003C\u002Fstrong> to unlock all premium features and maximize your analytics potential!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.wp-buy.com\u002Fsupport-center\u002F\" rel=\"nofollow ugc\">Visit Our Support Center\u003C\u002Fa>\u003C\u002Fstrong> for any assistance.\u003C\u002Fp>\n\u003Cp>Your website is getting visitors. Don’t miss out on the insights that can help your business grow.\u003C\u002Fp>\n","This plugin will help you to track your visitors, browsers, operating systems, visits and much more in one dashboard page.",40000,1832736,84,233,"2026-02-21T04:42:00.000Z","3.0.1",[105,23,106,107,108],"hits-counter","stats-analytics","traffic","visitor","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvisitors-traffic-real-time-statistics.8.5.zip",90,8,"2026-04-03 22:10:48",{"slug":114,"name":115,"version":116,"author":117,"author_profile":118,"description":119,"short_description":120,"active_installs":121,"downloaded":122,"rating":123,"num_ratings":124,"last_updated":125,"tested_up_to":15,"requires_at_least":126,"requires_php":16,"tags":127,"homepage":129,"download_link":130,"security_score":131,"vuln_count":28,"unpatched_count":13,"last_vuln_date":132,"fetched_at":30},"wp-post-real-time-statistics","WP Post Statistics (Visitors & Visits Counter)","2.9","osama.esh","https:\u002F\u002Fprofiles.wordpress.org\u002Fosamaesh\u002F","\u003Cp>a simple tool to know your post statistics (With GEO locations)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Single Post Statistics includes: \u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Comprehensive overview page (Dashboard), including country stats, cities, visitors, visits\u003C\u002Fli>\n\u003Cli>compatible with any post type\u003C\u002Fli>\n\u003Cli>Visits & Visitors, see how many hits your site get in any period\u003C\u002Fli>\n\u003Cli>see how many people are viewing your site posts by weekly statistics\u003C\u002Fli>\n\u003Cli>GEO locations\u003C\u002Fli>\n\u003C\u002Ful>\n","a simple tool to know your post statistics",2000,29400,96,4,"2025-03-08T20:43:00.000Z","4.1",[21,128,23,106,107],"hits","https:\u002F\u002Fwww.plugins-market.com\u002Fproduct\u002Fvisitor-statistics-pro\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-post-real-time-statistics.2.9.zip",91,"2022-05-27 00:00:00",{"slug":134,"name":135,"version":136,"author":137,"author_profile":138,"description":139,"short_description":140,"active_installs":141,"downloaded":142,"rating":143,"num_ratings":144,"last_updated":145,"tested_up_to":146,"requires_at_least":147,"requires_php":148,"tags":149,"homepage":151,"download_link":152,"security_score":153,"vuln_count":124,"unpatched_count":13,"last_vuln_date":154,"fetched_at":30},"kama-clic-counter","Kama Click Counter","4.1.1","Timur Kamaev","https:\u002F\u002Fprofiles.wordpress.org\u002Ftkama\u002F","\u003Cp>With this plugin, you can gather statistics on clicks for file downloads or any other link across the site.\u003C\u002Fp>\n\u003Cp>To insert a file download block, use the \u003Ccode>[download url=\"any file URL\"]\u003C\u002Fcode> shortcode.\u003C\u002Fp>\n\u003Cp>The plugin does not include additional tools for uploading files. All files must be uploaded using the standard WordPress media uploader. The URLs are then used to create the download block.\u003C\u002Fp>\n\u003Cp>Additionally, the plugin includes:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>A button in the visual editor for quickly inserting the file download block shortcode.\u003C\u002Fli>\n\u003Cli>A customizable widget that allows you to display a list of “Top Downloads” or “Top Link Clicks.”\u003C\u002Fli>\n\u003C\u002Ful>\n","Count clicks on any link across the site. Creates a beautiful file download block in post content. Includes a widget for top downloads.",900,38958,78,9,"2025-10-27T09:53:00.000Z","6.8.5","5.9","7.4",[19,150,21,23],"count-clicks","https:\u002F\u002Fwp-kama.com\u002F77","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkama-clic-counter.zip",95,"2025-09-22 00:00:00",{"slug":156,"name":157,"version":158,"author":159,"author_profile":160,"description":161,"short_description":162,"active_installs":163,"downloaded":164,"rating":165,"num_ratings":166,"last_updated":167,"tested_up_to":168,"requires_at_least":16,"requires_php":16,"tags":169,"homepage":172,"download_link":173,"security_score":174,"vuln_count":13,"unpatched_count":13,"last_vuln_date":37,"fetched_at":30},"extrawatch","ExtraWatch (Live Stats, Realtime tracking, Visits on a map and more)","4.0.53","matto3c","https:\u002F\u002Fprofiles.wordpress.org\u002Fmatto3c\u002F","\u003Cp>See what’s going on on your website in real time. See who’s browsing which pages, information about his country, city, device. This is a great way how to see how your website is being used by the users.\u003Cbr \u002F>\nSee most recent visits on a map, most popular pages, visits from search engines and where your visitors came from. In this version, data are stored in the cloud, and script is loaded asynchronously, so there is no performance impact on your website.\u003Cbr \u002F>\nIf you’re using static plugins like WP Slimstat, this plugin will give you completely different real time experience.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Support\u003C\u002Fstrong>\u003Cbr \u002F>\n  The ExtraWatch team does not provide support for the plugin on the WordPress.org forums.\u003Cbr \u002F>\n  Please use \u003Ca href=\"https:\u002F\u002Fwww.extrawatch.com\u002Fticket\" rel=\"nofollow ugc\">ExtraWatch support\u003C\u002Fa>.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>features:\u003C\u002Fh4>\n\u003Ch4>Monitor User activity\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>check who’s browsing your website in real time, export visitors of your website in CSV format, see bots and spiders\u003C\u002Fli>\n\u003Cli>traffic sources with graphs (google, facebook, twitter, instagram, youtube, linkedin)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Click Heatmap\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>displays visitor’s mouse clicks, you can see most popular areas of your website\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Map\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>allows you to watch visits on a map in real time\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Stats\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>unique visitors, page load stats\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Organic traffic\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>see which pages are visited from google and other search engines\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Popular pages\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>most popular pages for selected day\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Referrers\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>where most of the visits came from\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For more information and demos please visit: https:\u002F\u002Fwww.extrawatch.com\u002Fdemos\u003C\u002Fp>\n\u003Ch3>Arbitrary section\u003C\u002Fh3>\n","See visits and clicks on your website in realtime!",100,64924,68,7,"2021-02-03T06:17:00.000Z","5.6.17",[19,21,170,23,171],"ip","stats","http:\u002F\u002Fwww.extrawatch.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fextrawatch.zip",85,{"attackSurface":176,"codeSignals":235,"taintFlows":263,"riskAssessment":348,"analyzedAt":364},{"hooks":177,"ajaxHandlers":215,"restRoutes":216,"shortcodes":217,"cronEvents":234,"entryPointCount":124,"unprotectedCount":13},[178,184,189,193,196,201,204,208,212],{"type":179,"name":180,"callback":181,"file":182,"line":183},"action","plugins_loaded","download_counter_plugins_loaded","download-counter.php",59,{"type":179,"name":185,"callback":186,"priority":187,"file":182,"line":188},"upgrader_process_complete","download_counter_plugin_update",10,60,{"type":179,"name":190,"callback":191,"file":182,"line":192},"admin_menu","download_counter_plugin_statistics",61,{"type":179,"name":190,"callback":194,"file":182,"line":195},"download_counter_plugin_settings",62,{"type":197,"name":198,"callback":199,"priority":187,"file":182,"line":200},"filter","plugin_action_links","download_counter_plugin_button_statistics",69,{"type":197,"name":198,"callback":202,"priority":187,"file":182,"line":203},"download_counter_plugin_button_settings",70,{"type":197,"name":205,"callback":206,"priority":187,"file":182,"line":207},"plugin_row_meta","download_counter_plugin_links",71,{"type":197,"name":209,"callback":210,"file":182,"line":211},"parse_request","download_counter_download_route",72,{"type":179,"name":213,"callback":214,"file":182,"line":26},"admin_init","download_counter_admin_init",[],[],[218,222,226,230],{"tag":219,"callback":220,"file":182,"line":221},"download_counter_url","download_counter_url_shortcode",64,{"tag":223,"callback":224,"file":182,"line":225},"download_counter_count","download_counter_count_shortcode",65,{"tag":227,"callback":228,"file":182,"line":229},"download_counter_size","download_counter_size_shortcode",66,{"tag":231,"callback":232,"file":182,"line":233},"download_counter_date","download_counter_date_shortcode",67,[],{"dangerousFunctions":236,"sqlUsage":244,"outputEscaping":250,"fileOperations":13,"externalRequests":13,"nonceChecks":261,"capabilityChecks":13,"bundledLibraries":262},[237,241],{"fn":238,"file":182,"line":239,"context":240},"unserialize",346,"$file = unserialize($file);",{"fn":238,"file":182,"line":242,"context":243},652,"return @unserialize(get_option(self::$optName));",{"prepared":245,"raw":28,"locations":246},23,[247],{"file":182,"line":248,"context":249},352,"$wpdb->query() with variable interpolation",{"escaped":110,"rawEcho":124,"locations":251},[252,255,257,259],{"file":182,"line":253,"context":254},111,"raw output",{"file":182,"line":256,"context":254},249,{"file":182,"line":258,"context":254},273,{"file":182,"line":260,"context":254},292,3,[],[264,283,294,332],{"entryPoint":265,"graph":266,"unsanitizedCount":13,"severity":282},"download_counter_plugin_page_statistics (download-counter.php:170)",{"nodes":267,"edges":279},[268,273],{"id":269,"type":270,"label":271,"file":182,"line":272},"n0","source","$_GET",183,{"id":274,"type":275,"label":276,"file":182,"line":277,"wp_function":278},"n1","sink","get_results() [SQLi]",219,"get_results",[280],{"from":269,"to":274,"sanitized":281},true,"low",{"entryPoint":284,"graph":285,"unsanitizedCount":13,"severity":282},"download_counter_plugin_page_settings (download-counter.php:328)",{"nodes":286,"edges":292},[287,290],{"id":269,"type":270,"label":288,"file":182,"line":289},"$_FILES",341,{"id":274,"type":275,"label":291,"file":182,"line":239,"wp_function":238},"unserialize() [Object Injection]",[293],{"from":269,"to":274,"sanitized":281},{"entryPoint":295,"graph":296,"unsanitizedCount":13,"severity":282},"\u003Cdownload-counter> (download-counter.php:0)",{"nodes":297,"edges":326},[298,300,303,305,309,312,317,320,322,324],{"id":269,"type":270,"label":299,"file":182,"line":64},"$_GET (x4)",{"id":274,"type":275,"label":301,"file":182,"line":88,"wp_function":302},"header() [Header Injection]","header",{"id":304,"type":270,"label":271,"file":182,"line":64},"n2",{"id":306,"type":275,"label":307,"file":182,"line":253,"wp_function":308},"n3","echo() [XSS]","echo",{"id":310,"type":270,"label":311,"file":182,"line":64},"n4","$_GET (x2)",{"id":313,"type":275,"label":314,"file":182,"line":315,"wp_function":316},"n5","query() [SQLi]",113,"query",{"id":318,"type":270,"label":319,"file":182,"line":272},"n6","$_GET (x5)",{"id":321,"type":275,"label":276,"file":182,"line":277,"wp_function":278},"n7",{"id":323,"type":270,"label":288,"file":182,"line":289},"n8",{"id":325,"type":275,"label":291,"file":182,"line":239,"wp_function":238},"n9",[327,328,329,330,331],{"from":269,"to":274,"sanitized":281},{"from":304,"to":306,"sanitized":281},{"from":310,"to":313,"sanitized":281},{"from":318,"to":321,"sanitized":281},{"from":323,"to":325,"sanitized":281},{"entryPoint":333,"graph":334,"unsanitizedCount":347,"severity":52},"download_counter_download_route (download-counter.php:79)",{"nodes":335,"edges":342},[336,337,338,339,340,341],{"id":269,"type":270,"label":299,"file":182,"line":64},{"id":274,"type":275,"label":301,"file":182,"line":88,"wp_function":302},{"id":304,"type":270,"label":271,"file":182,"line":64},{"id":306,"type":275,"label":307,"file":182,"line":253,"wp_function":308},{"id":310,"type":270,"label":271,"file":182,"line":64},{"id":313,"type":275,"label":314,"file":182,"line":315,"wp_function":316},[343,345,346],{"from":269,"to":274,"sanitized":344},false,{"from":304,"to":306,"sanitized":344},{"from":310,"to":313,"sanitized":344},6,{"summary":349,"deductions":350},"The 'download-counter' plugin v1.4 exhibits a mixed security posture. On one hand, it demonstrates good practices like a high percentage of prepared SQL statements and properly escaped output, along with the absence of file operations and external HTTP requests, suggesting a developer conscious of common web vulnerabilities.  However, the presence of two 'unserialize' calls is a significant concern, as it can lead to Remote Code Execution if not handled with extreme care.  While the static analysis shows no unprotected entry points and a reasonable number of nonce checks, the taint analysis highlights one flow with unsanitized paths, which could potentially be exploited for path traversal attacks, especially given the plugin's vulnerability history that includes this very type of vulnerability.",[351,354,357,359,362],{"reason":352,"points":353},"Unpatched High Severity CVE",18,{"reason":355,"points":356},"High severity taint flow with unsanitized paths",12,{"reason":358,"points":187},"Use of dangerous 'unserialize' function",{"reason":360,"points":361},"Vulnerability history includes Path Traversal",5,{"reason":363,"points":261},"Vulnerability history includes XSS","2026-03-16T22:40:41.861Z",{"wat":366,"direct":373},{"assetPaths":367,"generatorPatterns":369,"scriptPaths":370,"versionParams":371},[368],"\u002Fwp-content\u002Fplugins\u002Fdownload-counter\u002Fdownload-counter.php",[],[],[372],"download-counter.php?ver=",{"cssClasses":374,"htmlComments":375,"htmlAttributes":376,"restEndpoints":377,"jsGlobals":378,"shortcodeOutput":379},[],[],[],[],[],[380,381,382,383],"[download_counter_url","[download_counter_count","[download_counter_size","[download_counter_date"]