[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fY5bHM1-i1TvlKG_XorXWxMdP2lPXWYVxUfsvz16fRe8":3,"$fpHWBNDp7QsItvAFcuLaAEK98LsOBH_mvDH52WrPwSwE":401,"$fVXfi1lnyLdD6sbublMV1IyodkqyWQOf5v4-zyoFYXVM":405},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":18,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"discovery_status":30,"vulnerabilities":31,"developer":32,"crawl_stats":28,"alternatives":36,"analysis":144,"fingerprints":375},"dx2-post-hit-counter","DX2 Post Hit Counter","1.3","dx2systems","https:\u002F\u002Fprofiles.wordpress.org\u002Fdx2systems\u002F","\u003Cp>This hit counter is a light weight way to track the hits on all posts, including custom post types on your WordPress blog. The plugin uses ajax to count the hit which means it will have no affect on the speed of which the page loads. This also leads to a much more reliable hit count as the hit is not actually counted until the page has loaded. To the end user this hit counter will have almost no affect on the pages load speed.\u003C\u002Fp>\n\u003Cp>Your traffic stats are can be viewed quickly from the dashboard widget that will give you a daily overview of the most popular posts along with the total hits on the website for the past few days.\u003C\u002Fp>\n\u003Cp>When logged in as an administrator you will be able to see the number of hits that a page has from the WordPress admin title bar. When editing the post you will also be able to see the number of hits the page has received and have the ability to reset the counter if needed. Admin hits will be automatically be discounted to save the hit count being inflated due to testing or other general use of the site by any of the administrators.\u003C\u002Fp>\n\u003Cp>A few notes about the sections above:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Light weight method to count page hits.\u003C\u002Fli>\n\u003Cli>AJAX powered recording system\u003C\u002Fli>\n\u003Cli>Dashboard widget for traffic overview\u003C\u002Fli>\n\u003Cli>Administration tools to manage hits\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>https:\u002F\u002Fdx2systems.com\u002F\u003C\u002Fp>\n","A lightweight counter to track the number of hits on all posts on the website.",30,4023,100,2,"2017-03-31T08:07:00.000Z","4.7.33","3.0.1","",[20,21,22,23,24],"comments","count","hit","page-views","traffic","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdx2-post-hit-counter.1.3.zip",85,0,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":11,"trust_score":34,"computed_at":35},1,84,"2026-05-20T03:59:01.215Z",[37,59,82,104,123],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":34,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":17,"requires_php":18,"tags":50,"homepage":18,"download_link":55,"security_score":56,"vuln_count":57,"unpatched_count":27,"last_vuln_date":58,"fetched_at":29},"visitors-traffic-real-time-statistics","Visitor Traffic Real Time Statistics","8.6","wp-buy","https:\u002F\u002Fprofiles.wordpress.org\u002Fwp-buy\u002F","\u003Cp>\u003Cstrong>Visitor Traffic Real-Time Statistics for WordPress\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Unlock powerful insights into your website traffic with\u003Cstrong>Visitor Traffic Real-Time Statistics\u003C\u002Fstrong>, the ultimate WordPress plugin for tracking visitors, visits, browsers, operating systems, and more — all in one intuitive dashboard.\u003C\u002Fp>\n\u003Cp>With real-time data and easy-to-use shortcodes, you’ll get a complete picture of your site’s performance without the complexity. Whether you’re a blogger, business owner, or marketer, this plugin gives you the tools to understand your audience better and make smarter decisions.\u003C\u002Fp>\n\u003Ch3>\u003Cstrong>Why Choose Visitor Traffic Real-Time Statistics?\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Real-Time Visitor Tracking:\u003C\u002Fstrong> See who’s visiting your site and when — in real-time.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>User-Friendly Dashboard:\u003C\u002Fstrong> All your key insights are displayed on a single, easy-to-navigate dashboard.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Comprehensive Analytics:\u003C\u002Fstrong> Track visitors by country, device, browser, operating system, referrer, and more.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shortcode Integration:\u003C\u002Fstrong> Display visitor stats anywhere on your site with simple shortcodes.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>SEO Insights:\u003C\u002Fstrong> Monitor keywords, search engine referrals, and traffic sources to improve your SEO performance.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Available Shortcodes (Simple & Flexible)\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cp>Add these shortcodes to any post, page, or widget to showcase your traffic stats:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>[ahc_stats_widget]\u003C\u002Fcode> – Display a site-wide statistics widget on the front end.  \u003C\u002Fli>\n\u003Cli>\u003Ccode>[ahc_stats_widget title=\"Your Title\" fontsize=\"16\" display_today_visitors=true display_total_visitors=true]\u003C\u002Fcode> – Customize the widget with your own parameters.  \u003C\u002Fli>\n\u003Cli>\u003Ccode>[ahc_today_visitors]\u003C\u002Fcode> – Display today’s visitors.  \u003C\u002Fli>\n\u003Cli>\u003Ccode>[ahc_today_visits]\u003C\u002Fcode> – Display today’s page views.  \u003C\u002Fli>\n\u003Cli>\u003Ccode>[ahc_total_visitors]\u003C\u002Fcode> – Show your all-time visitor count.  \u003C\u002Fli>\n\u003Cli>\u003Ccode>[ahc_total_visits]\u003C\u002Fcode> – Display total visits to your site.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Free Version Features:\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Real-time visitor tracking and stats.  \u003C\u002Fli>\n\u003Cli>Insights into browsers, countries, hits, referrals, and searches.  \u003C\u002Fli>\n\u003Cli>Track daily, weekly, and monthly visitor trends.  \u003C\u002Fli>\n\u003Cli>Shortcodes to display key stats on your site.  \u003C\u002Fli>\n\u003Cli>Track top referring websites and keywords.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Upgrade to Pro for Even More Power!\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cp>Take your analytics to the next level with\u003Cstrong>Visitor Traffic Real-Time Statistics Pro\u003C\u002Fstrong>:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Multisite Support:\u003C\u002Fstrong> Track traffic across multiple sites in one place.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Live User Tracking:\u003C\u002Fstrong> See how many people are online right now.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Interactive Google Maps:\u003C\u002Fstrong> Visualize visitor locations globally.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Advanced Page Tracking:\u003C\u002Fstrong> Identify your most popular posts and pages.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Detailed Visit Graphs:\u003C\u002Fstrong> Analyze visitor activity by the hour.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Advanced SEO Insights:\u003C\u002Fstrong> Discover the keywords driving traffic to your site.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable Reports:\u003C\u002Fstrong> Get actionable insights with easy-to-read reports.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Who Can Benefit?\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Bloggers who want to track reader engagement.  \u003C\u002Fli>\n\u003Cli>E-commerce store owners looking to understand customer behavior.  \u003C\u002Fli>\n\u003Cli>Marketers seeking to optimize SEO strategies.  \u003C\u002Fli>\n\u003Cli>Website administrators who need detailed traffic analysis.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Get Started Today!\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Install the plugin now\u003C\u002Fstrong> to gain valuable insights into your site traffic and grow your online presence.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.wp-buy.com\u002Fproduct\u002Fvisitors-traffic-real-time-statistics-pro\u002F#gopro\" rel=\"nofollow ugc\">Go PRO Now\u003C\u002Fa>\u003C\u002Fstrong> to unlock all premium features and maximize your analytics potential!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.wp-buy.com\u002Fsupport-center\u002F\" rel=\"nofollow ugc\">Visit Our Support Center\u003C\u002Fa>\u003C\u002Fstrong> for any assistance.\u003C\u002Fp>\n\u003Cp>Your website is getting visitors. Don’t miss out on the insights that can help your business grow.\u003C\u002Fp>\n","This plugin will help you to track your visitors, browsers, operating systems, visits and much more in one dashboard page.",30000,1855571,234,"2026-03-22T15:04:00.000Z","6.9.4",[51,52,53,24,54],"hits-counter","statistics","stats-analytics","visitor","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvisitors-traffic-real-time-statistics.8.6.zip",90,8,"2026-04-03 22:10:48",{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":67,"downloaded":68,"rating":69,"num_ratings":57,"last_updated":70,"tested_up_to":49,"requires_at_least":71,"requires_php":72,"tags":73,"homepage":79,"download_link":80,"security_score":69,"vuln_count":33,"unpatched_count":33,"last_vuln_date":81,"fetched_at":29},"wps-visitor-counter","WPS Visitor Counter","1.4.9","techmix","https:\u002F\u002Fprofiles.wordpress.org\u002Ftechmix\u002F","\u003Cp>WPS Visitor Counter plugin is one of the best visitor counter plugin in wordpress. This plugin will help you to display the number of visitor your website have and its traffic statistics for your WordPress website. We have tried to include all the available data you needed to show in the visitor counter. Here are the items we are showing on our visitor counter:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Users Today\u003C\u002Fli>\n\u003Cli>Users Yesterday\u003C\u002Fli>\n\u003Cli>Users Last 7 days\u003C\u002Fli>\n\u003Cli>Users Last 30 days\u003C\u002Fli>\n\u003Cli>Users This Month\u003C\u002Fli>\n\u003Cli>Users This Year\u003C\u002Fli>\n\u003Cli>Total Users\u003C\u002Fli>\n\u003Cli>Views Today\u003C\u002Fli>\n\u003Cli>Views Yesterday\u003C\u002Fli>\n\u003Cli>Views Last 7 days\u003C\u002Fli>\n\u003Cli>Views Last 30 days\u003C\u002Fli>\n\u003Cli>Views This Month\u003C\u002Fli>\n\u003Cli>Views This Year\u003C\u002Fli>\n\u003Cli>Total Views\u003C\u002Fli>\n\u003Cli>Who’s Online\u003C\u002Fli>\n\u003Cli>Your IP Address\u003C\u002Fli>\n\u003Cli>Server Time\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You will find all the data authentic and this will help you to get your website traffic stats. Just install the plugin. It will take effect just after you install it on your website. Our plugin is compatible for all types of websites and able to run in all versions of WordPress.\u003C\u002Fp>\n\u003Ch4>WPS Visitor Counter shortcode\u003C\u002Fh4>\n\u003Cp>Use this [wps_visitor_counter] Shortcode anywhere in your website where you want to show visitor counter.\u003C\u002Fp>\n\u003Ch3>gutenberg block supported\u003C\u002Fh3>\n\u003Ch4>Translation Support\u003C\u002Fh4>\n\u003Cp>The plugin is fully internationalized and supports multiple languages. Translation files are located in the \u002Flanguages\u002F directory.\u003C\u002Fp>\n\u003Cp>Currently available languages:\u003Cbr \u002F>\n* English (default)\u003Cbr \u002F>\n* Spanish (es_ES) – Complete translation included\u003C\u002Fp>\n\u003Cp>To create translations for other languages:\u003Cbr \u002F>\n1. Use the wps-visitor-counter.pot file as a template\u003Cbr \u002F>\n2. Create a .po file for your language (e.g., wps-visitor-counter-fr_FR.po)\u003Cbr \u002F>\n3. Translate the strings and compile to .mo format\u003Cbr \u002F>\n4. WordPress will automatically load the appropriate translation file\u003C\u002Fp>\n\u003Ch3>Arbitrary section\u003C\u002Fh3>\n\u003Cp>Refer Installation and FAQ section for all required information\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support and feature requests, please visit our website at https:\u002F\u002Ftechmix.xyz\u002F\u003C\u002Fp>\n","Display website visitor statistics with widget, shortcode, and Gutenberg block support.",10000,120263,78,"2026-01-21T19:29:00.000Z","5.0","7.4",[74,75,76,77,78],"blog-stats","hit-counter","traffic-statistics","visitor-counter","website-counter","https:\u002F\u002Ftechmix.xyz\u002Fdownloads\u002Fwps-visitor-counter-plugin-for-wordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwps-visitor-counter.1.4.9.zip","2025-11-21 00:00:00",{"slug":83,"name":84,"version":85,"author":86,"author_profile":87,"description":88,"short_description":89,"active_installs":90,"downloaded":91,"rating":34,"num_ratings":92,"last_updated":93,"tested_up_to":94,"requires_at_least":95,"requires_php":18,"tags":96,"homepage":100,"download_link":101,"security_score":102,"vuln_count":14,"unpatched_count":27,"last_vuln_date":103,"fetched_at":29},"srs-simple-hits-counter","SRS Simple Hits Counter","2.1","SandyRig","https:\u002F\u002Fprofiles.wordpress.org\u002Fsandyrig\u002F","\u003Cp>As the name suggests, it’s a very simple Hit Counter that counts the number of Unique Visitors and Page-views. It’s very light weight so it doesn’t strain your site or cause render blocking.\u003C\u002Fp>\n\u003Cp>You can show either Unique Visitors count or Page-views count anywhere on the site using widgets or shortcode. You can also add\u002Fshow both Counters by using two copies of the widget or the shortcode.\u003C\u002Fp>\n\u003Cp>Note: It keeps counting even when you have no widget or shortcode active. To completely disable the counter you have to disable the plugin.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>AJAX based counter ignores most bots or crawlers\u003C\u002Fli>\n\u003Cli>Monthly and weekly graph in admin\u003C\u002Fli>\n\u003Cli>Show the Unique Visitors, Page-views count or both\u003C\u002Fli>\n\u003Cli>Ability to reset the counter to any number any time\u003C\u002Fli>\n\u003Cli>Can be shown anywhere on the site using Widgets and Shortcode\u003C\u002Fli>\n\u003Cli>Counter works and shows data in admin even when no widget or short-code is active\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>SHORTCODES\u003C\u002Fh4>\n\u003Cp>[srs_total_visitors] for Unique Visitors\u003Cbr \u002F>\n[srs_total_pageViews] for Page-views\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fatif.rocks\u002Fsrs-simple-hits-counter\u002F\" rel=\"nofollow ugc\">DEMO\u003C\u002Fa>\u003C\u002Fp>\n","Simple plugin to count and show a total number of hits (Unique visitors or page-views) to the site without using any third party code.",8000,104238,6,"2025-01-19T15:08:00.000Z","6.7.5","3.4",[97,98,99,23,54],"analytics","counter","hits","https:\u002F\u002Fatif.rocks\u002Fsrs-simple-hits-counter\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsrs-simple-hits-counter.zip",91,"2023-01-19 00:00:00",{"slug":105,"name":106,"version":107,"author":108,"author_profile":109,"description":110,"short_description":111,"active_installs":112,"downloaded":113,"rating":114,"num_ratings":115,"last_updated":116,"tested_up_to":49,"requires_at_least":117,"requires_php":18,"tags":118,"homepage":119,"download_link":120,"security_score":121,"vuln_count":33,"unpatched_count":27,"last_vuln_date":122,"fetched_at":29},"wp-post-real-time-statistics","Real-Time Post Statistics for WordPress","3.1","osama.esh","https:\u002F\u002Fprofiles.wordpress.org\u002Fosamaesh\u002F","\u003Cp>WP Post Statistics is a simple and efficient plugin that helps you track and understand your post performance with clear and useful statistics, including GEO location data.\u003C\u002Fp>\n\u003Cp>The plugin gives you a complete overview of how your content is performing, allowing you to monitor visits, visitors, and traffic sources without any complex setup. It is designed to be fast, accurate, and easy to use.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Single Post Statistics includes: \u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Comprehensive overview dashboard with countries, cities, visitors, and visits\u003C\u002Fli>\n\u003Cli>Compatible with all post types\u003C\u002Fli>\n\u003Cli>Track visits and unique visitors over any selected period\u003C\u002Fli>\n\u003Cli>Weekly statistics to monitor content performance trends\u003C\u002Fli>\n\u003Cli>GEO location tracking (countries and cities)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The plugin works instantly after activation and stores all data locally without relying on external services, making it reliable and privacy-friendly.\u003C\u002Fp>\n\u003Cp>Perfect for bloggers, content creators, and website owners who want a clear and simple way to monitor their content performance.\u003C\u002Fp>\n","A lightweight and simple tool to track your post statistics with real insights.",2000,30612,96,4,"2026-03-22T15:31:00.000Z","4.1",[98,99,52,53,24],"https:\u002F\u002Fwww.plugins-market.com\u002Fproduct\u002Fvisitor-statistics-pro\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-post-real-time-statistics.3.1.zip",99,"2022-05-27 00:00:00",{"slug":124,"name":125,"version":126,"author":127,"author_profile":128,"description":129,"short_description":130,"active_installs":131,"downloaded":132,"rating":133,"num_ratings":134,"last_updated":135,"tested_up_to":136,"requires_at_least":137,"requires_php":18,"tags":138,"homepage":18,"download_link":143,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"traffic-stats-widget","Plugin Name: Traffic Stats Widget Plugin","1.0.2","helenthomaswp","https:\u002F\u002Fprofiles.wordpress.org\u002Fhelenthomaswp\u002F","\u003Cp>TSW shows the number of visitors \u002F hits \u002F unique IPs in the past 24 hours, 7 days and 30 days. It also shows the number of users currently online.\u003C\u002Fp>\n\u003Cp>It provides a robots filter, but the automatic traffic could also be considered.\u003C\u002Fp>\n\u003Cp>Traffic Stats Widget offers language support and automatic log deletion.\u003C\u002Fp>\n","TSW lets your users know how much traffic you have on your blog. It counts pages visited, hits and unique IPs on your blog and shows it in a widget.",700,50380,88,7,"2017-11-28T20:05:00.000Z","4.0.38","2.8.0",[75,139,140,141,142],"traffic-counter","traffic-widget","user-traffic","visitors-counter","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftraffic-stats-widget.1.0.2.zip",{"attackSurface":145,"codeSignals":210,"taintFlows":309,"riskAssessment":360,"analyzedAt":374},{"hooks":146,"ajaxHandlers":192,"restRoutes":207,"shortcodes":208,"cronEvents":209,"entryPointCount":115,"unprotectedCount":27},[147,153,158,163,168,172,176,180,184,188],{"type":148,"name":149,"callback":150,"file":151,"line":152},"action","wp_enqueue_scripts","dx2hits_style","dx2posthitcounter.php",17,{"type":148,"name":154,"callback":155,"priority":156,"file":151,"line":157},"manage_posts_custom_column","dx2_posthitcolumns",10,72,{"type":159,"name":160,"callback":161,"file":151,"line":162},"filter","manage_posts_columns","dx2_posthit_columns",82,{"type":148,"name":164,"callback":165,"priority":166,"file":151,"line":167},"admin_bar_menu","dx2hits_custom_toolbar_link",999,106,{"type":148,"name":169,"callback":170,"file":151,"line":171},"post_submitbox_misc_actions","dx2hits_clear_count_link",109,{"type":148,"name":173,"callback":174,"file":151,"line":175},"admin_enqueue_scripts","dx2hits_dashboard_scripts",194,{"type":148,"name":177,"callback":178,"file":151,"line":179},"wp_dashboard_setup","dx2hits_dashboardhitmanager",262,{"type":148,"name":181,"callback":182,"file":151,"line":183},"wp_network_dashboard_setup","dx2hits_multihitreport",320,{"type":148,"name":185,"callback":186,"file":151,"line":187},"admin_menu","dx2_add_pages",385,{"type":148,"name":189,"callback":190,"file":151,"line":191},"widgets_init","anonymous",542,[193,199,201,205],{"action":194,"nopriv":195,"callback":196,"hasNonce":197,"hasCapCheck":197,"file":151,"line":198},"count_hit",false,"dx2hits_count_hit_callback",true,38,{"action":194,"nopriv":197,"callback":196,"hasNonce":197,"hasCapCheck":197,"file":151,"line":200},39,{"action":202,"nopriv":195,"callback":203,"hasNonce":197,"hasCapCheck":197,"file":151,"line":204},"clear_hit_count","dx2hits_clear_hit_count_callback",122,{"action":202,"nopriv":197,"callback":203,"hasNonce":197,"hasCapCheck":197,"file":151,"line":206},123,[],[],[],{"dangerousFunctions":211,"sqlUsage":215,"outputEscaping":244,"fileOperations":27,"externalRequests":27,"nonceChecks":14,"capabilityChecks":14,"bundledLibraries":308},[212],{"fn":213,"file":151,"line":191,"context":214},"create_function","add_action('widgets_init', create_function('', 'return register_widget(\"dx2hits_popular_posts_widget",{"prepared":27,"raw":216,"locations":217},12,[218,221,223,225,227,230,232,234,236,238,240,242],{"file":151,"line":219,"context":220},56,"$wpdb->query() with variable interpolation",{"file":151,"line":222,"context":220},57,{"file":151,"line":224,"context":220},58,{"file":151,"line":226,"context":220},130,{"file":151,"line":228,"context":229},225,"$wpdb->get_results() with variable interpolation",{"file":151,"line":231,"context":229},274,{"file":151,"line":233,"context":229},341,{"file":151,"line":235,"context":229},395,{"file":151,"line":237,"context":229},575,{"file":151,"line":239,"context":229},587,{"file":151,"line":241,"context":229},590,{"file":151,"line":243,"context":229},593,{"escaped":92,"rawEcho":198,"locations":245},[246,249,251,253,255,256,257,258,260,261,262,264,266,267,268,269,271,273,274,275,277,279,280,282,284,285,287,289,290,292,294,296,298,299,300,302,304,306],{"file":151,"line":247,"context":248},59,"raw output",{"file":151,"line":250,"context":248},77,{"file":151,"line":252,"context":248},117,{"file":151,"line":254,"context":248},302,{"file":151,"line":254,"context":248},{"file":151,"line":254,"context":248},{"file":151,"line":254,"context":248},{"file":151,"line":259,"context":248},378,{"file":151,"line":259,"context":248},{"file":151,"line":259,"context":248},{"file":151,"line":263,"context":248},416,{"file":151,"line":265,"context":248},422,{"file":151,"line":265,"context":248},{"file":151,"line":265,"context":248},{"file":151,"line":265,"context":248},{"file":151,"line":270,"context":248},456,{"file":151,"line":272,"context":248},457,{"file":151,"line":272,"context":248},{"file":151,"line":272,"context":248},{"file":151,"line":276,"context":248},461,{"file":151,"line":278,"context":248},462,{"file":151,"line":278,"context":248},{"file":151,"line":281,"context":248},471,{"file":151,"line":283,"context":248},472,{"file":151,"line":283,"context":248},{"file":151,"line":286,"context":248},480,{"file":151,"line":288,"context":248},481,{"file":151,"line":288,"context":248},{"file":151,"line":291,"context":248},486,{"file":151,"line":293,"context":248},488,{"file":151,"line":295,"context":248},494,{"file":151,"line":297,"context":248},495,{"file":151,"line":297,"context":248},{"file":151,"line":297,"context":248},{"file":151,"line":301,"context":248},517,{"file":151,"line":303,"context":248},520,{"file":151,"line":305,"context":248},535,{"file":151,"line":307,"context":248},536,[],[310,334,342],{"entryPoint":311,"graph":312,"unsanitizedCount":27,"severity":333},"dx2hits_count_hit_callback (dx2posthitcounter.php:40)",{"nodes":313,"edges":330},[314,318,323,326],{"id":315,"type":316,"label":317,"file":151,"line":219},"n0","source","$_POST['postid'] (x3)",{"id":319,"type":320,"label":321,"file":151,"line":219,"wp_function":322},"n1","sink","query() [SQLi]","query",{"id":324,"type":316,"label":325,"file":151,"line":247},"n2","$_POST['postid']",{"id":327,"type":320,"label":328,"file":151,"line":247,"wp_function":329},"n3","echo() [XSS]","echo",[331,332],{"from":315,"to":319,"sanitized":197},{"from":324,"to":327,"sanitized":197},"low",{"entryPoint":335,"graph":336,"unsanitizedCount":27,"severity":333},"dx2hits_clear_hit_count_callback (dx2posthitcounter.php:124)",{"nodes":337,"edges":340},[338,339],{"id":315,"type":316,"label":325,"file":151,"line":226},{"id":319,"type":320,"label":321,"file":151,"line":226,"wp_function":322},[341],{"from":315,"to":319,"sanitized":197},{"entryPoint":343,"graph":344,"unsanitizedCount":27,"severity":333},"\u003Cdx2posthitcounter> (dx2posthitcounter.php:0)",{"nodes":345,"edges":356},[346,348,349,350,351,354],{"id":315,"type":316,"label":347,"file":151,"line":219},"$_POST['postid'] (x4)",{"id":319,"type":320,"label":321,"file":151,"line":219,"wp_function":322},{"id":324,"type":316,"label":325,"file":151,"line":247},{"id":327,"type":320,"label":328,"file":151,"line":247,"wp_function":329},{"id":352,"type":316,"label":353,"file":151,"line":219},"n4","$_POST (x4)",{"id":355,"type":320,"label":328,"file":151,"line":254,"wp_function":329},"n5",[357,358,359],{"from":315,"to":319,"sanitized":197},{"from":324,"to":327,"sanitized":197},{"from":352,"to":355,"sanitized":197},{"summary":361,"deductions":362},"The dx2-post-hit-counter plugin v1.3 exhibits a generally good security posture with a limited attack surface and no publicly known vulnerabilities.  All identified entry points, including the four AJAX handlers, appear to have authentication checks, which is a strong mitigating factor against unauthorized access. The absence of taint analysis findings for critical or high severity issues, along with zero recorded CVEs, further reinforces a positive security outlook. However, the static analysis does reveal areas for improvement. Notably, 100% of SQL queries are not using prepared statements, which introduces a significant risk of SQL injection vulnerabilities. Additionally, only 14% of output is properly escaped, suggesting a substantial risk of Cross-Site Scripting (XSS) vulnerabilities.  The presence of a dangerous function like `create_function` is also a concern, as it can lead to code execution vulnerabilities if not handled with extreme care. While the plugin has a clean vulnerability history, the identified code quality issues, particularly the lack of prepared statements for SQL and insufficient output escaping, present real security risks that need to be addressed.",[363,365,367,370,372],{"reason":364,"points":33},"All SQL queries use prepared statements.",{"reason":366,"points":33},"All outputs are properly escaped.",{"reason":368,"points":369},"Dangerous function create_function detected.",5,{"reason":371,"points":156},"SQL queries without prepared statements.",{"reason":373,"points":57},"Low percentage of properly escaped outputs.","2026-03-16T22:24:53.631Z",{"wat":376,"direct":389},{"assetPaths":377,"generatorPatterns":382,"scriptPaths":383,"versionParams":384},[378,379,380,381],"\u002Fwp-content\u002Fplugins\u002Fdx2-post-hit-counter\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Fdx2-post-hit-counter\u002Fscripts\u002Fcounthit.js","\u002Fwp-content\u002Fplugins\u002Fdx2-post-hit-counter\u002Fscripts\u002Ffunctions.js","\u002Fwp-content\u002Fplugins\u002Fdx2-post-hit-counter\u002Fchartjs\u002FChart.bundle.min.js",[],[379,380,381],[385,386,387,388],"dx2-post-hit-counter\u002Fstyle.css?v=1.0.5","dx2-post-hit-counter\u002Fscripts\u002Fcounthit.js?ver=1.0.0","dx2-post-hit-counter\u002Fscripts\u002Ffunctions.js?ver=1.0.0","dx2-post-hit-counter\u002Fchartjs\u002FChart.bundle.min.js?ver=1.0.0",{"cssClasses":390,"htmlComments":391,"htmlAttributes":392,"restEndpoints":395,"jsGlobals":397,"shortcodeOutput":400},[],[],[393,394],"id=\"ab-dx2hits\"","id=\"dx2_posthitcount\"",[396],"\u002Fwp-json\u002Fdx2-post-hit-counter\u002Fv1\u002Fcount-hit",[398,399],"hitdata","reset",[],{"error":197,"url":402,"statusCode":403,"statusMessage":404,"message":404},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fdx2-post-hit-counter\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":115,"versions":406},[407,412,419,426],{"version":6,"download_url":25,"svn_tag_url":408,"released_at":28,"has_diff":195,"diff_files_changed":409,"diff_lines":28,"trac_diff_url":410,"vulnerabilities":411,"is_current":197},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fdx2-post-hit-counter\u002Ftags\u002F1.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fdx2-post-hit-counter%2Ftags%2F1.2&new_path=%2Fdx2-post-hit-counter%2Ftags%2F1.3",[],{"version":413,"download_url":414,"svn_tag_url":415,"released_at":28,"has_diff":195,"diff_files_changed":416,"diff_lines":28,"trac_diff_url":417,"vulnerabilities":418,"is_current":195},"1.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdx2-post-hit-counter.1.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fdx2-post-hit-counter\u002Ftags\u002F1.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fdx2-post-hit-counter%2Ftags%2F1.1&new_path=%2Fdx2-post-hit-counter%2Ftags%2F1.2",[],{"version":420,"download_url":421,"svn_tag_url":422,"released_at":28,"has_diff":195,"diff_files_changed":423,"diff_lines":28,"trac_diff_url":424,"vulnerabilities":425,"is_current":195},"1.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdx2-post-hit-counter.1.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fdx2-post-hit-counter\u002Ftags\u002F1.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fdx2-post-hit-counter%2Ftags%2F1.0&new_path=%2Fdx2-post-hit-counter%2Ftags%2F1.1",[],{"version":427,"download_url":428,"svn_tag_url":429,"released_at":28,"has_diff":195,"diff_files_changed":430,"diff_lines":28,"trac_diff_url":28,"vulnerabilities":431,"is_current":195},"1.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdx2-post-hit-counter.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fdx2-post-hit-counter\u002Ftags\u002F1.0\u002F",[],[]]