Top Posts for Google Analytics by Asentechllc Security & Risk Analysis

wordpress.org/plugins/ga-top-posts

Display most read articles from fetching google analytics API

10 active installs v1.1 PHP + WP 4.9+ Updated Sep 5, 2019
google-analyticslatest-articleslatest-postsmost-readrecent-posts
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Top Posts for Google Analytics by Asentechllc Safe to Use in 2026?

Generally Safe

Score 85/100

Top Posts for Google Analytics by Asentechllc has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 6yr ago
Risk Assessment

The "ga-top-posts" plugin v1.1 exhibits a generally strong security posture, primarily due to the absence of known vulnerabilities and a good effort in implementing security best practices. The static analysis reveals a well-controlled attack surface, with all identified entry points (AJAX handlers, shortcodes, cron events) appearing to have proper authentication or capability checks. Furthermore, the plugin exclusively uses prepared statements for SQL queries and has a high percentage of properly escaped output, which are crucial for preventing common web vulnerabilities. The lack of any recorded CVEs, past or present, is a significant positive indicator of the plugin's historical security reliability.

Key Concerns

  • Use of the unserialize() function
  • Less than 100% output escaping
Vulnerabilities
None known

Top Posts for Google Analytics by Asentechllc Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Top Posts for Google Analytics by Asentechllc Code Analysis

Dangerous Functions
4
Raw SQL Queries
0
0 prepared
Unescaped Output
11
59 escaped
Nonce Checks
2
Capability Checks
1
File Operations
1
External Requests
2
Bundled Libraries
0

Dangerous Functions Found

unserialize$ga_return = unserialize($get_ga);ga-top-posts-widget.php:153
unserialize$ga_return = unserialize($get_ga);ga-top-posts-widget.php:182
unserialize$ga_return = unserialize($get_ga);ga-top-posts.php:147
unserialize$ga_return = unserialize($value);ga-top-posts.php:180

Output Escaping

84% escaped70 total outputs
Data Flows
All sanitized

Data Flow Analysis

3 flows
insert_conf_data (ga-top-posts.php:104)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Top Posts for Google Analytics by Asentechllc Attack Surface

Entry Points4
Unprotected0

AJAX Handlers 3

authwp_ajax_insert_conf_dataga-top-posts.php:28
authwp_ajax_sync_from_gaga-top-posts.php:29
authwp_ajax_ga_save_settingsga-top-posts.php:31

Shortcodes 1

[displayTopPosts] ga-top-posts.php:41
WordPress Hooks 5
actionwidgets_initga-top-posts-widget.php:6
actionadmin_menuga-top-posts.php:25
actionadmin_footerga-top-posts.php:26
actionadmin_enqueue_scriptsga-top-posts.php:27
actionga_top_post_cronga-top-posts.php:39

Scheduled Events 1

ga_top_post_cron
Maintenance & Trust

Top Posts for Google Analytics by Asentechllc Maintenance & Trust

Maintenance Signals

WordPress version tested5.2.24
Last updatedSep 5, 2019
PHP min version
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Top Posts for Google Analytics by Asentechllc Developer Profile

Asentech, LLC

2 plugins · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Top Posts for Google Analytics by Asentechllc

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/ga-top-posts/css/ga-top-post.css/wp-content/plugins/ga-top-posts/js/ga-top-post.js
Script Paths
/wp-content/plugins/ga-top-posts/js/ga-top-post.js
Version Parameters
ga-top-posts/style.css?ver=ga-top-posts/js/ga-top-post.js?ver=

HTML / DOM Fingerprints

HTML Comments
<!-- GA Configuration for top posts --><!-- Shortcode: [displayTopPosts] --><!-- Sync from GA to database --><!-- Click on Sync from GA button to update database entries: -->
Data Attributes
id="custom-top-post-wrap"id="custom-top-post-form"id="custom-top-post-sync-form"id="connection-error-message"id="connection-error-message-sync"id="file"+1 more
JS Globals
GAAjax
REST Endpoints
/wp-json/
Shortcode Output
[displayTopPosts]
FAQ

Frequently Asked Questions about Top Posts for Google Analytics by Asentechllc