[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fiYY9pGrNwALQvtzoKQS-EwCNszD7K_dGYagdK6DkqmI":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":37,"analysis":147,"fingerprints":264},"gostats-for-wordpress","GoStats for WordPress","1.4","rchmura","https:\u002F\u002Fprofiles.wordpress.org\u002Frchmura\u002F","\u003Cp>This plug-in will allow you to easily install GoStats web analytics into your blog.  An optional Analytics “Map Widget” is available to show your and your visitors the geograpy of your people who read your blog.  In order to fully use this feature, please read the installation insructions\u003C\u002Fp>\n\u003Cp>Further details can be found at: http:\u002F\u002Fcounterblog.gostats.com\u002Fhow-to-install-a-gostats-hit-counter-using-wordpress-plugins\u003C\u002Fp>\n","Insert GoStats Analytics into your Blog.  Often used alongside other widgets for an even better understanding of how your site is used. Includes Map.",20,35839,100,3,"2015-12-15T19:38:00.000Z","4.3.34","2.0.2","",[20,21,22,23,24],"analytics","gostats","hit-counter","site-stats","stats","http:\u002F\u002Fgostats.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgostats-for-wordpress.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},1,30,84,"2026-04-04T16:38:21.994Z",[38,64,84,102,124],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":53,"tags":54,"homepage":59,"download_link":60,"security_score":61,"vuln_count":62,"unpatched_count":28,"last_vuln_date":63,"fetched_at":30},"google-analytics-dashboard-for-wp","ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin)","9.0.3","Syed Balkhi","https:\u002F\u002Fprofiles.wordpress.org\u002Fsmub\u002F","\u003Cp>The \u003Ca href=\"https:\u002F\u002Fexactmetrics.com?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">ExactMetrics\u003C\u002Fa> Google Analytics for WordPress plugin helps you properly setup all the powerful Google Analytics tracking features without writing any code or hiring a developer.\u003C\u002Fp>\n\u003Cp>More importantly, over 1 million users love ExactMetrics because of our signature Google Analytics Dashboard that helps you view key Google Analytics stats right inside your WordPress dashboard.\u003C\u002Fp>\n\u003Cp>Our goal at ExactMetrics is to help you grow your business faster with data-driven decisions.\u003C\u002Fp>\n\u003Cp>This is why we built the most comprehensive Google Analytics plugin for WordPress, so you can setup all the powerful tracking features that website owners otherwise miss out on when simply pasting the analytics code in WordPress.\u003C\u002Fp>\n\u003Cp>We go beyond the simple google analytics script and add the advanced event tracking, so you can see all important user behavior in WordPress with just a few clicks (without hiring a developer).\u003C\u002Fp>\n\u003Cp>ExactMetrics works automatically Google Analytics 4 (GA4) so that you can your website can be prepared for the future of Google Analytics.\u003C\u002Fp>\n\u003Cp>Basically, we made the same advanced Google analytics setup that big enterprise companies used to pay thousands of dollars for, available to every small business owner without the high costs.\u003C\u002Fp>\n\u003Cp>This is why even the large companies like Microsoft, Quickbooks, Pizza Hut, Delta, Pepsi, Coldwell Bankers, and many others are using ExactMetrics to properly setup Google Analytics and see the custom analytics reports in WordPress.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>ExactMetrics Pro\u003C\u002Fstrong>\u003Cbr \u002F>\n  This plugin is the lite version of ExactMetrics Pro plugin that comes with all the Google analytics tracking features you will ever need including events tracking, ecommerce tracking, custom dimensions tracking, form conversion tracking, affiliate link tracking, and tons more. \u003Ca href=\"https:\u002F\u002Fexactmetrics.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">click here to purchase the best premium Google Analytics plugin for WordPress Now!\u003C\u002Fa>.\u003Cbr \u002F>\n  We are on a mission to level the playing field for small businesses, so they can grow their business faster with data-driven decisions.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F4GZ-IgZssao?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>See what one business owner is saying about ExactMetrics:\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>This is absolutely, positively, one of the TOP plugins to install on your WP site. There is no better way to quickly gauge traffic for spikes, surges, and consistency. I installed this on over a dozen WordPress installations and counting, thank you for an outstanding app!\u003Cbr \u002F>\n  Daniel Monaghan\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>Custom Google Analytics Reports\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Overview Report – See the most important Google Analytics data in an easy to understand report, right inside your WordPress dashboard (Save 5 minutes each day).\u003C\u002Fli>\n\u003Cli>Publisher Report – See exactly which content gets the most visit, which affiliate links are performing the best, what new partnership opportunities you should pursue, and more.\u003C\u002Fli>\n\u003Cli>Ecommerce Report – See all your important online store metrics in one place such as total revenue, conversion rate, average order value, top products, top conversion sources, and more.\u003C\u002Fli>\n\u003Cli>Search Console Report – See how well your website is ranking in Google, so you can optimize your SEO to grow your traffic.\u003C\u002Fli>\n\u003Cli>Forms Report – See your conversion stats for various contact forms and lead forms on your website to improve conversions.\u003C\u002Fli>\n\u003Cli>Custom Dimensions Report – See useful stats like most popular authors, best publication times, popular categories, tags, Yoast focus keywords, SEO score, etc.\u003C\u002Fli>\n\u003Cli>Real Time Report – see who is online on your website in real-time, right inside your WordPress dashboard.\u003C\u002Fli>\n\u003Cli>Customizable Google Analytics Dashboard Widget – Our dashboard widget allows you to have quick access to your most important stats at the moment you login to your WordPress dashboard.\u003C\u002Fli>\n\u003Cli>Page Insights in Admin Bar – Easily view analytics for each individual page and post from the ExactMetrics menu in WordPress admin bar while browsing your website.\u003C\u002Fli>\n\u003Cli>Landing Page Report – Shows you which pages your visitors land, without needing to log into Google Analytics.\u003C\u002Fli>\n\u003Cli>Source and Medium Report – gives you an easy view of Google Analytics UTM tracking.\u003C\u002Fli>\n\u003Cli>Technology Report – See which devices and browsers use your website the most.\u003C\u002Fli>\n\u003Cli>Campaign Report – Shows you Google Analytics UTM tracking and key metrics.\u003C\u002Fli>\n\u003Cli>Pages Report – See which pages are most poplular on your website.\u003C\u002Fli>\n\u003Cli>Coupon Report – See which coupons are used most on your website.\u003C\u002Fli>\n\u003Cli>Funnel Report – See how people buy from your store.\u003C\u002Fli>\n\u003Cli>Email Summaries – Get the most important metrics delivered to you and\u002For your client’s email inboxes weekly with our brandable Email Summaries, allowing you to keep up to date on your website’s Google Analytics results even without needing to login to the Google Analytics dashboard.\u003C\u002Fli>\n\u003Cli>PDF Exports – Easily take your ExactMetrics reports with you or send them to clients or colleagues by exporting all ExactMetrics reports as a brandable PDF.\u003C\u002Fli>\n\u003Cli>Site Speed Report – helps you improve your website’s performance by displaying key metrics and actionable tips to improve those based on WordPress-specific solutions.\u003C\u002Fli>\n\u003Cli>Popular Posts – Display popular posts in your post content automatically or using Gutenberg blocks and shortcodes. Show off your top posts to your visitors using sidebar widgets, Gutenberg blocks or shortcodes\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Integrations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>WooCommerce Google Analytics – Automatically setup Google analytics enhanced eCommerce tracking for WooCommerce and WooCommerce analytics.\u003C\u002Fli>\n\u003Cli>Easy Digital Downloads Google Analytics – Automatically setup Google analytics enhanced eCommerce tracking for EDD.\u003C\u002Fli>\n\u003Cli>MemberPress Google Analytics – Automatically setup Google analytics enhanced eCommerce tracking for MemberPress.\u003C\u002Fli>\n\u003Cli>WPForms Google Analytics – Automatically setup form conversion tracking for WPForms.\u003C\u002Fli>\n\u003Cli>Formidable Forms Google Analytics – Automatically setup form conversion tracking for Formidable Forms.\u003C\u002Fli>\n\u003Cli>Gravity Forms Google Analytics – Automatically setup form conversion tracking for Gravity Forms.\u003C\u002Fli>\n\u003Cli>YouTube Google Analytics – Automatically track video starts, stops, and watch progression of video plays of your YouTube videos.\u003C\u002Fli>\n\u003Cli>Vimeo Google Analytics – Automatically track video starts, stops, and watch progression of video plays of your Vimeo videos.\u003C\u002Fli>\n\u003Cli>HTML5 Video Google Analytics – Automatically track video starts, stops, and watch progression of video plays of your Vimeo videos.\u003C\u002Fli>\n\u003Cli>Exclude from Tracking Google Analytics – Disable loading of Google Analytics tracking on specific pages or posts.\u003C\u002Fli>\n\u003Cli>Contact Form 7 Google Analytics – Automatically setup form conversion tracking for Contact Form 7.\u003C\u002Fli>\n\u003Cli>Yoast Google Analytics – Automatically setup SEO score tracking for Yoast SEO with custom dimensions.\u003C\u002Fli>\n\u003Cli>Pretty Links Google Analytics – Automatically setup affiliate link tracking for Pretty Links.\u003C\u002Fli>\n\u003Cli>Thirsty Affiliates Google Analytics – Automatically setup affiliate link tracking for Thirsty Affiliates.\u003C\u002Fli>\n\u003Cli>AffiliateWP Google Analytics – Automatically setup affiliate link tracking for AffiliateWP.\u003C\u002Fli>\n\u003Cli>User Journey Orders – See which pages visit before becoming customers with WooCommerce, Easy Digital Downloads, MemberPress, LifterLMS, Restrict Content Pro, or GiveWP.\u003C\u002Fli>\n\u003Cli>User Feedback – Automatically track events and impressions with the popular User Feedback plugin.\u003C\u002Fli>\n\u003Cli>Google AdSense + Google Analytics – Automatically setup banner ads tracking for Google AdSense.\u003C\u002Fli>\n\u003Cli>Google Optimize + Google Analytics – Easily enable A\u002FB testing in WordPress with Google Optimize and Google Analytics.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>After reading this comprehensive feature list, you can probably imagine why over 1 million websites use ExactMetrics as their preferred Google Analytics plugin for WordPress.\u003C\u002Fp>\n\u003Cp>Give ExactMetrics a try.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>Love this plugin! It’s got powerful customization options, it’s easy to use, there’s good documentation, and if all that’s not enough, ExactMetrics is quick to provide support. Thanks for this wonderful plugin!\u003Cbr \u002F>\n  Julie Dupuis\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>Credits\u003C\u002Fh4>\n\u003Cp>This plugin is created by \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Fchriscct7\" title=\"Chris Christoff\" rel=\"friend nofollow ugc\">Chris Christoff\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fsyedbalkhi.com\u002F\" title=\"Syed Balkhi\" rel=\"friend nofollow ugc\">Syed Balkhi\u003C\u002Fa> with sponsorship from \u003Ca href=\"http:\u002F\u002Fwww.wpbeginner.com\u002F\" title=\"WPBeginner\" rel=\"friend nofollow ugc\">WPBeginner\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Localization\u003C\u002Fh3>\n\u003Cp>You can translate Google Analytics Dashboard for WP by ExactMetrics on \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fgoogle-analytics-dashboard-for-wp\" rel=\"nofollow ugc\">translate.wordpress.org\u003C\u002Fa>.\u003C\u002Fp>\n","Connects Google Analytics with your WordPress site. Displays stats to help you understand your users and site content on a whole new level!",300000,50654058,50,1546,"2026-03-03T15:34:00.000Z","6.9.0","5.6.0","7.2",[20,55,56,57,58],"google-analytics","google-analytics-dashboard","google-analytics-plugin","website-stats","https:\u002F\u002Fexactmetrics.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgoogle-analytics-dashboard-for-wp.9.0.3.zip",90,5,"2026-03-10 21:02:36",{"slug":65,"name":66,"version":67,"author":66,"author_profile":68,"description":69,"short_description":70,"active_installs":71,"downloaded":72,"rating":73,"num_ratings":74,"last_updated":75,"tested_up_to":76,"requires_at_least":77,"requires_php":78,"tags":79,"homepage":82,"download_link":83,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"piwik-pro","Piwik PRO","1.5.1","https:\u002F\u002Fprofiles.wordpress.org\u002Fpiwikpro\u002F","\u003Cp>A simple plugin to add the \u003Ca href=\"https:\u002F\u002Fpiwik.pro\u002F\" rel=\"nofollow ugc\">Piwik PRO Analytics Suite\u003C\u002Fa> container (with tracking code) to your WordPress site, making it easy to collect visitor data from any WordPress site and automatically track ecommerce in your WooCommerce store. You’ll also be able to manage consents and run tags after using this plugin.\u003C\u002Fp>\n\u003Ch4>What is Piwik PRO?\u003C\u002Fh4>\n\u003Cp>Piwik PRO is a privacy-first platform that provides advanced web and app analytics features while enabling full control over data. It provides flexible reports and data collection in addition to consent management, tag management and a customer data platform.\u003C\u002Fp>\n\u003Ch4>Analytics\u003C\u002Fh4>\n\u003Cp>Collect data across websites, apps, digital products and post-login areas. Customize how data is collected and analyze it with built-in audience, behavior, acquisition and conversion reports. Dive deeper with custom reports and access to raw data.\u003C\u002Fp>\n\u003Ch4>Tag Manager\u003C\u002Fh4>\n\u003Cp>Add flexible tags to your analytics stack without hiring an IT team to do it. Quickly create, test and deploy tags from templates or with custom code. Coordinate tag behavior with Analytics, Customer Data Platform and Consent Manager to fit any data collection approach.\u003C\u002Fp>\n\u003Ch4>Customer Data Platform (CDP)\u003C\u002Fh4>\n\u003Cp>Build customer profiles, segment audiences and create insightful single customer views. Quickly populate the profiles using data collected with the help of Analytics and Tag Manager. Set up Consent Manager so data is only collected data when there is specific consent for it.\u003C\u002Fp>\n\u003Ch4>Consent Manager\u003C\u002Fh4>\n\u003Cp>Manage consents and data subject requests in the same platform where data is collected and processed. Categorize data from Analytics and Tag Manager so that the data collected always agrees with the consent received.\u003C\u002Fp>\n","Piwik PRO - Web & App Analytics, Tag Manager, CDP and Consent Manager",3000,59916,66,7,"2026-03-05T11:39:00.000Z","6.9.4","5.7","7.4",[20,80,65,58,81],"piwik","woocommerce","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpiwik-pro\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpiwik-pro.1.5.1.zip",{"slug":85,"name":86,"version":87,"author":88,"author_profile":89,"description":90,"short_description":91,"active_installs":92,"downloaded":93,"rating":28,"num_ratings":28,"last_updated":94,"tested_up_to":95,"requires_at_least":96,"requires_php":18,"tags":97,"homepage":100,"download_link":101,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"zamango-analytics","Zamango Analytics","1.0","Zamango","https:\u002F\u002Fprofiles.wordpress.org\u002Fzamango\u002F","\u003Cp>\u003Ca href=\"http:\u002F\u002Fwww.zamango.com\u002F\" title=\"Zamango blog\" rel=\"nofollow ugc\">Zamango Analytics\u003C\u002Fa> plugin let you add counters and statistics trackers (Google Analytics, GoStats or other) to your blog.\u003C\u002Fp>\n\u003Cp>Main features of \u003Ca href=\"http:\u002F\u002Fwww.zamango.com\u002F\" title=\"Zamango developer's blog\" rel=\"nofollow ugc\">Zamango Analytics\u003C\u002Fa>:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>simple and intuitive interface\u003C\u002Fli>\n\u003Cli>minimum of settings will not embarrass you\u003C\u002Fli>\n\u003Cli>high speed functionality\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Other developers of such type of plugins try to make some functionality that is not very helpful and makes their blogs slow. This plugin is fast, simple and has required functionality.\u003C\u002Fp>\n","Plugin to add Google Analytics tracker, GoStats tracker or different web tracker to each page on your weblog without making any changes to your templa …",10,3159,"2010-04-12T04:13:00.000Z","2.9.2","2.8.0",[20,98,55,21,99],"counter","page-view-counter","http:\u002F\u002Fwww.zamango.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fzamango-analytics.1.0.zip",{"slug":103,"name":104,"version":105,"author":106,"author_profile":107,"description":108,"short_description":109,"active_installs":110,"downloaded":111,"rating":112,"num_ratings":113,"last_updated":114,"tested_up_to":76,"requires_at_least":115,"requires_php":78,"tags":116,"homepage":119,"download_link":120,"security_score":121,"vuln_count":122,"unpatched_count":28,"last_vuln_date":123,"fetched_at":30},"wp-statistics","WP Statistics – Simple, privacy-friendly Google Analytics alternative","14.16.3","VeronaLabs","https:\u002F\u002Fprofiles.wordpress.org\u002Fveronalabs\u002F","\u003Cp>Discover GDPR-compliant analytics with \u003Ca href=\"https:\u002F\u002Fwp-statistics.com\u002F?utm_source=wporg&utm_medium=link&utm_campaign=website\" rel=\"nofollow ugc\">WP Statistics\u003C\u002Fa>, the top choice for WordPress users seeking an alternative to Google Analytics. No external accounts, unlimited visitor tracking, and full data ownership—all stored directly in your WordPress database.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwp-statistics.com\u002Fdemo\" rel=\"nofollow ugc\">Checkout Demo\u003C\u002Fa> | \u003Ca href=\"#screenshots\" rel=\"nofollow ugc\">View Screenshots\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>GDPR Compliant (Data Privacy)\u003C\u002Fh4>\n\u003Cp>WP Statistics is GDPR, CCPA, PECR, and cookie compliance by default.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>We do not use cookies\u003C\u002Fli>\n\u003Cli>We do not store personally identifiable information (PII) by default\u003C\u002Fli>\n\u003Cli>100% data ownership. Data is entirely created and stored on your server\u003C\u002Fli>\n\u003Cli>Enhance IP Hashing with Random Daily Salt Mechanism\u003C\u002Fli>\n\u003Cli>Features to export and delete data for GDPR\u003C\u002Fli>\n\u003Cli>Respect for User Privacy with Do Not Track (DNT)\u003C\u002Fli>\n\u003Cli>Privacy Audit Tool for compliance with privacy laws\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Your site won’t need to have a cookie popup since WP Statistics uses \u003Ca href=\"https:\u002F\u002Fwp-statistics.com\u002Fresources\u002Fcounting-unique-visitors-without-cookies\u002F?utm_source=wporg&utm_medium=link&utm_campaign=doc\" rel=\"nofollow ugc\">cookie-less tracking\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>You can find more information in “\u003Ca href=\"https:\u002F\u002Fwp-statistics.com\u002Fresources\u002Fwhat-we-collect\u002F?utm_source=wporg&utm_medium=link&utm_campaign=doc\" rel=\"nofollow ugc\">What we collect\u003C\u002Fa>“.\u003C\u002Fp>\n\u003Ch4>Top Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Fully integrate with your WordPress and your content structure and you have the all reports all in your WP dashboard\u003C\u002Fli>\n\u003Cli>Content and Category Analytics: Track performance based on your site’s content and categories.\u003C\u002Fli>\n\u003Cli>Simple analytics dashboard\u003C\u002Fli>\n\u003Cli>Super easy to install. No coding or technical knowledge needed\u003C\u002Fli>\n\u003Cli>Advanced data privacy settings that are customizable to fit your needs, in compliance with diverse data protection laws\u003C\u002Fli>\n\u003Cli>Track URL parameters, including UTMs, for campaign analysis\u003C\u002Fli>\n\u003Cli>With configurable settings, manage large amounts of data on high-traffic websites\u003C\u002Fli>\n\u003Cli>Monitor live online user traffic in real-time\u003C\u002Fli>\n\u003Cli>Fully customized overview dashboard page\u003C\u002Fli>\n\u003Cli>Shows your most popular posts and pages\u003C\u002Fli>\n\u003Cli>Referrals Tracking: Track and analyze referrals with five reports: Referred Visitors, Referrers, Search Engines, Social Media, and Source Categories. The new Source Categories report includes support for Organic Search, Paid Search, Organic Social, Paid Social, and more.\u003C\u002Fli>\n\u003Cli>Lists your top referral sources such as search engines\u003C\u002Fli>\n\u003Cli>Author Analytics: Measures author performance.\u003C\u002Fli>\n\u003Cli>Geographic Reports: Location-based analytics, including countries, cities, European countries, US states, and regions within your country.\u003C\u002Fli>\n\u003Cli>Devices Report: Detailed device-specific analytics covering browsers, operating systems, device categories and device models.\u003C\u002Fli>\n\u003Cli>Bypass Ad Blockers: Dynamically load the tracking script with a unique name and address to bypass ad blockers.\u003C\u002Fli>\n\u003Cli>Integrate with WP Consent API: Ensures compatibility with consent plugins like Complianz and Cookiebot.\u003C\u002Fli>\n\u003Cli>Email reports with customizable content\u003C\u002Fli>\n\u003Cli>Customize role-based access to view analytics and modify settings.\u003C\u002Fli>\n\u003Cli>Advanced Filtering & Exceptions: By user roles, IPs, countries, URLs, and more.\u003C\u002Fli>\n\u003Cli>Premium Add-on: \u003Ca href=\"https:\u002F\u002Fwp-statistics.com\u002Fproduct\u002Fwp-statistics-data-plus?utm_source=wporg&utm_medium=link&utm_campaign=dp\" rel=\"nofollow ugc\">Data Plus\u003C\u002Fa>\n\u003Cul>\n\u003Cli>\u003Cstrong>Custom Post Type Tracking\u003C\u002Fstrong>: DataPlus extends WP Statistics’ tracking to include all custom post types in addition to Posts and Pages.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Taxonomy Analytics\u003C\u002Fstrong>: In addition to monitoring default taxonomies like Categories and Tags, DataPlus also tracks custom taxonomies.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Link Tracker\u003C\u002Fstrong>: Find out which outbound links your audience clicks on, giving you insights into their preferences and behaviors.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Download Tracker\u003C\u002Fstrong>: Keep track of what’s being downloaded, who’s downloading it, and when.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Individual Author Performance\u003C\u002Fstrong>: Detailed metrics on the performance of individual authors.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Detailed Analytics for Each Country\u003C\u002Fstrong>: In-depth analytics for each country to enhance geographical reporting.\u003C\u002Fli>\n\u003Cli>And more!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Premium Add-on: \u003Ca href=\"https:\u002F\u002Fwp-statistics.com\u002Fproduct\u002Fwp-statistics-marketing\u002F?utm_source=wporg&utm_medium=link&utm_campaign=marketing\" rel=\"nofollow ugc\">Marketing\u003C\u002Fa>\n\u003Cul>\n\u003Cli>\u003Cstrong>Campaign Analytics\u003C\u002Fstrong>: Track UTM-tagged links and see which campaigns drive the most visitors.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Google Search Console Integration\u003C\u002Fstrong>: Monitor impressions, clicks, and queries.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Event Tracking\u003C\u002Fstrong>: Create goals based on clicks, pageviews, or events and monitor conversions.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Built-in UTM Link Builder\u003C\u002Fstrong>: Generate and validate campaign URLs inside your dashboard.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Get the most out of your website analytics by using WP Statistics Premium Add-ons\u003C\u002Fstrong>\u003Cbr \u002F>\nUpgrade your analytics toolkit with our range of premium add-ons, including \u003Ca href=\"https:\u002F\u002Fwp-statistics.com\u002Fproduct\u002Fwp-statistics-data-plus?utm_source=wporg&utm_medium=link&utm_campaign=dp\" rel=\"nofollow ugc\">Data Plus\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwp-statistics.com\u002Fproduct\u002Fwp-statistics-advanced-reporting\u002F?utm_source=wporg&utm_medium=link&utm_campaign=adv-report\" rel=\"nofollow ugc\">Advanced Reporting\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwp-statistics.com\u002Fproduct\u002Fwp-statistics-realtime-stats\u002F?utm_source=wporg&utm_medium=link&utm_campaign=realtime\" rel=\"nofollow ugc\">Real-Time Stats\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwp-statistics.com\u002Fproduct\u002Fwp-statistics-mini-chart\u002F?utm_source=wporg&utm_medium=link&utm_campaign=mini-chart\" rel=\"nofollow ugc\">Mini Chart\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwp-statistics.com\u002Fproduct\u002Fwp-statistics-marketing\u002F?utm_source=wporg&utm_medium=link&utm_campaign=marketing\" rel=\"nofollow ugc\">Marketing\u003C\u002Fa>, and \u003Ca href=\"https:\u002F\u002Fwp-statistics.com\u002Fadd-ons\u002F?utm_source=wporg&utm_medium=link&utm_campaign=add-ons\" rel=\"nofollow ugc\">more\u003C\u002Fa>. Making informed decisions is easier with these powerful tools.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Special Offer:\u003C\u002Fstrong> Save up to 60% on all premium features when you purchase \u003Ca href=\"https:\u002F\u002Fwp-statistics.com\u002Fpricing\u002F?utm_source=wporg&utm_medium=link&utm_campaign=premium\" rel=\"nofollow ugc\">WP Statistics Premium\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Report Bugs\u003C\u002Fh4>\n\u003Cp>Having trouble with a bug? Please \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-statistics\u002Fwp-statistics\u002Fissues\u002Fnew\" rel=\"nofollow ugc\">create an issue\u003C\u002Fa> on GitHub. Kindly note that \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-statistics\u002Fwp-statistics\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa> is exclusively for bug reports; other inquiries will be closed.\u003C\u002Fp>\n\u003Cp>For security vulnerabilities, please report them through the \u003Ca href=\"https:\u002F\u002Fpatchstack.com\u002Fdatabase\u002Fwordpress\u002Fplugin\u002Fwp-statistics\u002Fvdp\" rel=\"nofollow ugc\">Patchstack Vulnerability Disclosure Program\u003C\u002Fa>. The Patchstack team will validate, triage, and handle any security issues.\u003C\u002Fp>\n","Get website traffic insights with GDPR\u002FCCPA compliant, privacy-friendly analytics. Includes visitor data, stunning graphs, and no data sharing.",600000,34815131,82,750,"2026-02-23T15:26:00.000Z","6.6",[20,55,117,118,24],"insights","site-visitors","https:\u002F\u002Fwp-statistics.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-statistics.14.16.3.zip",81,35,"2025-09-26 16:25:11",{"slug":125,"name":126,"version":127,"author":128,"author_profile":129,"description":130,"short_description":131,"active_installs":132,"downloaded":133,"rating":134,"num_ratings":135,"last_updated":136,"tested_up_to":76,"requires_at_least":137,"requires_php":138,"tags":139,"homepage":143,"download_link":144,"security_score":145,"vuln_count":14,"unpatched_count":28,"last_vuln_date":146,"fetched_at":30},"burst-statistics","Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative)","3.2.3","Burst Statistics B.V.","https:\u002F\u002Fprofiles.wordpress.org\u002Fburstbv\u002F","\u003Ch4>Finally, analytics that you’ll actually use.\u003C\u002Fh4>\n\u003Cp>Google Analytics is overkill. Other WordPress statistics plugins are cluttered and confusing. You just want to know what’s happening on your site – without a data science degree.\u003C\u002Fp>\n\u003Cp>Burst Statistics gives you a clean, intuitive analytics dashboard focused on the metrics that actually matter. \u003Cstrong>No external accounts. No complex setup. Install, activate, and understand your traffic in seconds.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Trusted by \u003Cstrong>200,000+ WordPress sites\u003C\u002Fstrong>. Built by the experienced team behind UpdraftPlus, WP-Optimize, and All-In-One Security.\u003C\u002Fp>\n\u003Ch4>What our users are saying\u003C\u002Fh4>\n\u003Cblockquote>\n\u003Cp>“Finally, an analytics plugin I can actually explain to clients.”\u003Cbr \u002F>\n  — @anguskeystone on wordpress.org\u003C\u002Fp>\n\u003Cp>“I tried WP Statistics and Independent Analytics, but they’re overloaded and confusing. Burst’s UI is intuitive and focused on what matters to me.”\u003Cbr \u002F>\n  — @vallered on wordpress.org\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>Why Burst Statistics?\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Designed to be actionable\u003C\u002Fstrong>\u003Cbr \u002F>\nOther analytics plugins throw everything at you. Burst shows what matters — visitors, pageviews, referrers, top pages — in a dashboard you’ll actually use. No overload of data. No confusing menus.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Privacy-first by design\u003C\u002Fstrong>\u003Cbr \u002F>\nAll statistics stay on your server. No external tracking. Your data is yours – we never see it without your explicit permission.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Zero setup friction\u003C\u002Fstrong>\u003Cbr \u002F>\nInstall, activate, done. No Google accounts, no tracking codes, no configuration headaches. Start seeing live visitors immediately.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Built for WordPress\u003C\u002Fstrong>\u003Cbr \u002F>\nNot a port from another platform. Designed specifically for WordPress with native performance and seamless integration.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Fast and lightweight\u003C\u002Fstrong>\u003Cbr \u002F>\nOptimized database queries, no bloated scripts (\u003C4kb tracking script), no external dependencies slowing down your pages. Designed to track accurately even when using aggressive server-side caching.\u003C\u002Fp>\n\u003Cp>\u003Ch4>Features\u003C\u002Fh4>\n\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Understand your traffic\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>View table of top performing pages and posts\u003C\u002Fli>\n\u003Cli>Track key metrics (Visitors, Sessions, Pageviews, Bounce Rate)\u003C\u002Fli>\n\u003Cli>Breakdown of visitors by device (Desktop, Tablet, Mobile)\u003C\u002Fli>\n\u003Cli>Filter data by custom date ranges\u003C\u002Fli>\n\u003Cli>Compare traffic over time\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Real-time analytics\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Identify the real-time source for live visitors\u003C\u002Fli>\n\u003Cli>View the specific pages users are visiting now\u003C\u002Fli>\n\u003Cli>See a live count of active users on your site\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>See what content performs\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Top pages and posts ranked by views\u003C\u002Fli>\n\u003Cli>Compare any date range\u003C\u002Fli>\n\u003Cli>Track individual page performance\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Custom conversion tracking\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Track views, clicks and hooks\u003C\u002Fli>\n\u003Cli>Track WooCommerce sales\u003C\u002Fli>\n\u003Cli>Track custom events or hooks\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Privacy without compromise\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>100% self-hosted — all statistics stored locally in your WordPress database\u003C\u002Fli>\n\u003Cli>Cookieless tracking option (no consent banner required in some countries)\u003C\u002Fli>\n\u003Cli>Designed to support GDPR, CCPA, DSGVO, AVG, RGPD, and PECR compliance\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Stay informed\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Weekly or monthly email reports delivered to your inbox\u003C\u002Fli>\n\u003Cli>Compare periods to spot trends\u003C\u002Fli>\n\u003Cli>Get notified when tracking does not work\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>From the creators of UpdraftPlus, WP Optimize and All In One Security\u003C\u002Fh4>\n\u003Cp>Burst Statistics was created by experienced developers who also created:\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fupdraftplus\u002F\" rel=\"ugc\">UpdraftPlus: WP Backup & Migration Plugin\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fall-in-one-wp-security-and-firewall\u002F\" rel=\"ugc\">All-In-One Security (AIOS) – Security and Firewall\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-optimize\u002F\" rel=\"ugc\">WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Who is Burst for?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Bloggers & content creators\u003C\u002Fstrong> — See which posts resonate with your audience\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Small business owners\u003C\u002Fstrong> — Understand your traffic without complexity\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WooCommerce stores\u003C\u002Fstrong> — Track visitor behavior and sales (Burst Pro – Business plan)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Agencies & freelancers\u003C\u002Fstrong> — Manage analytics for your clients (Burst Pro – Agency plan)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy-conscious site owners\u003C\u002Fstrong> — GDPR-compliant stats without consent banners\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Anyone tired of Google Analytics\u003C\u002Fstrong> — Get clarity instead of confusion\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Unlock comprehensive insights into your website’s user behaviour with Burst Pro. Benefit from advanced features designed to improve performance, boost engagement, and drive conversions. \u003Ca href=\"https:\u002F\u002Fburst-statistics.com\u002Fpricing\u002F\" rel=\"nofollow ugc\">Get Burst Pro now.\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Free vs Pro\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Burst Statistics (Free)\u003C\u002Fstrong> includes everything you need to understand your website traffic: visitors, pageviews, referrers, top content, device stats, goal tracking, email reports, and more.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Burst Pro\u003C\u002Fstrong> adds advanced features for businesses and professionals:\u003C\u002Fp>\n\u003Cp>CREATOR PLAN\u003Cbr \u002F>\n* UTM campaign tracking — See which marketing efforts drive results\u003Cbr \u002F>\n* Geographic data — Country and city-level visitor insights\u003Cbr \u002F>\n* Advanced filtering — Segment data by any dimension\u003Cbr \u002F>\n* Data archiving settings — Keep your database lean automatically\u003Cbr \u002F>\n* Priority support — Direct contact with our developers (You’ll speak to actual humans!)\u003C\u002Fp>\n\u003Cp>BUSINESS PLAN\u003Cbr \u002F>\n* Everything in the creator plan +\u003Cbr \u002F>\n* Full sales dashboard — Understand what content brings in the most revenue\u003Cbr \u002F>\n* Revenue attribution — Connect WooCommerce sales to traffic sources\u003C\u002Fp>\n\u003Cp>AGENCY PLAN\u003Cbr \u002F>\n* Everything in the business plan +\u003Cbr \u002F>\n* Reporting — Generate shareable reports\u003C\u002Fp>\n\u003Cp>All Burst Pro plans include \u003Cstrong>priority support\u003C\u002Fstrong>.  You’ll have direct contact with our developers (You’ll speak to actual humans!)\u003C\u002Fp>\n\u003Ch4>Learn More\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fburst-statistics.com\u002Fburst-statistics-vs-google-analytics\u002F\" rel=\"nofollow ugc\">Burst Statistics vs Google Analytics\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fburst-statistics.com\u002Fwhy-is-burst-privacy-friendly\u002F\" rel=\"nofollow ugc\">Privacy & GDPR Compliance\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fburst-statistics.com\u002Fpricing\u002F\" rel=\"nofollow ugc\">Burst Pro Pricing\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Privacy and Data Sharing\u003C\u002Fh4>\n\u003Cp>Burst Statistics includes an \u003Cstrong>optional\u003C\u002Fstrong> data sharing program. It is disabled by default. You can enable it under Burst Statistics \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Settings \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Data Sharing, and you can turn it off again at any time from the same location.\u003Cbr \u002F>\nWhen enabled, the plugin sends a small set of aggregated, anonymized metrics to Burst Statistics’ servers once per month. This includes traffic statistics (visitors, pageviews, bounce rate, session duration), database row counts and query performance timings. No personal data, IP addresses, domain names, or visitor information is ever transmitted. All data is aggregated on your server before it leaves, making it impossible to trace back to your website or any individual user.\u003C\u002Fp>\n\u003Cp>We use this data to:\u003Cbr \u002F>\n* build anonymous industry benchmarks so you can compare your site’s performance against peers;\u003Cbr \u002F>\n* understand which features are most used, so we can prioritize development effectively;\u003Cbr \u002F>\n* know which WordPress and PHP versions are in active use, so we can make informed support decisions;\u003Cbr \u002F>\n* identify slow database queries across real-world installs, so we can improve plugin performance for everyone.\u003C\u002Fp>\n\u003Cp>For the complete list of data fields collected and full details on how the data is used, please read our \u003Ca href=\"https:\u002F\u002Fburst-statistics.com\u002Fhow-we-handle-anonymous-usage-data\u002F\" rel=\"nofollow ugc\">Data Sharing Policy\u003C\u002Fa>.\u003Cbr \u002F>\nThis feature connects to: https:\u002F\u002Fapi.burst-statistics.com\u003C\u002Fp>\n\u003Ch4>Installation\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Go to \u003Cstrong>Plugins \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Add New\u003C\u002Fstrong> in your WordPress dashboard\u003C\u002Fli>\n\u003Cli>Search for \u003Cstrong>Burst\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Click \u003Cstrong>Install Now\u003C\u002Fstrong>, then \u003Cstrong>Activate\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Visit \u003Cstrong>Statistics \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Dashboard\u003C\u002Fstrong> to see your analytics\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>That’s it. No external accounts. No tracking codes to paste. Burst starts collecting statistics immediately.\u003C\u002Fp>\n","Analytics you'll actually use. Privacy-friendly, zero config, and designed to be actionable. Get insights, not just raw data.",200000,7013207,98,173,"2026-03-12T07:52:00.000Z","6.4","8.0",[20,140,141,142,24],"gdpr","privacy","statistics","https:\u002F\u002Fwww.wordpress.org\u002Fplugins\u002Fburst-statistics","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fburst-statistics.3.2.3.zip",96,"2025-06-27 00:00:00",{"attackSurface":148,"codeSignals":169,"taintFlows":206,"riskAssessment":254,"analyzedAt":263},{"hooks":149,"ajaxHandlers":165,"restRoutes":166,"shortcodes":167,"cronEvents":168,"entryPointCount":28,"unprotectedCount":28},[150,156,161],{"type":151,"name":152,"callback":153,"file":154,"line":155},"action","plugins_loaded","GoStatsMap_init","GoStats.map.widget.php",38,{"type":151,"name":157,"callback":158,"file":159,"line":160},"admin_menu","gostats_admin","GoStats.php",14,{"type":151,"name":162,"callback":163,"file":159,"line":164},"wp_footer","gostats_getcode",105,[],[],[],[],{"dangerousFunctions":170,"sqlUsage":171,"outputEscaping":173,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":205},[],{"prepared":28,"raw":28,"locations":172},[],{"escaped":28,"rawEcho":174,"locations":175},15,[176,178,180,182,184,185,187,189,191,193,195,197,199,201,203],{"file":154,"line":11,"context":177},"raw output",{"file":154,"line":179,"context":177},22,{"file":154,"line":181,"context":177},28,{"file":154,"line":183,"context":177},29,{"file":154,"line":183,"context":177},{"file":154,"line":186,"context":177},31,{"file":159,"line":188,"context":177},41,{"file":159,"line":190,"context":177},43,{"file":159,"line":192,"context":177},46,{"file":159,"line":194,"context":177},54,{"file":159,"line":196,"context":177},59,{"file":159,"line":198,"context":177},123,{"file":159,"line":200,"context":177},125,{"file":159,"line":202,"context":177},133,{"file":159,"line":204,"context":177},135,[],[207,239],{"entryPoint":208,"graph":209,"unsanitizedCount":14,"severity":238},"gostats_manage (GoStats.php:24)",{"nodes":210,"edges":233},[211,216,221,224,226,229],{"id":212,"type":213,"label":214,"file":159,"line":215},"n0","source","$_POST['gostats_siteid']",27,{"id":217,"type":218,"label":219,"file":159,"line":215,"wp_function":220},"n1","sink","update_option() [Settings Manipulation]","update_option",{"id":222,"type":213,"label":223,"file":159,"line":181},"n2","$_POST['gostats_server']",{"id":225,"type":218,"label":219,"file":159,"line":181,"wp_function":220},"n3",{"id":227,"type":213,"label":228,"file":159,"line":188},"n4","$_SERVER['REQUEST_URI']",{"id":230,"type":218,"label":231,"file":159,"line":188,"wp_function":232},"n5","echo() [XSS]","echo",[234,236,237],{"from":212,"to":217,"sanitized":235},false,{"from":222,"to":225,"sanitized":235},{"from":227,"to":230,"sanitized":235},"medium",{"entryPoint":240,"graph":241,"unsanitizedCount":14,"severity":253},"\u003CGoStats> (GoStats.php:0)",{"nodes":242,"edges":249},[243,244,245,246,247,248],{"id":212,"type":213,"label":214,"file":159,"line":215},{"id":217,"type":218,"label":219,"file":159,"line":215,"wp_function":220},{"id":222,"type":213,"label":223,"file":159,"line":181},{"id":225,"type":218,"label":219,"file":159,"line":181,"wp_function":220},{"id":227,"type":213,"label":228,"file":159,"line":188},{"id":230,"type":218,"label":231,"file":159,"line":188,"wp_function":232},[250,251,252],{"from":212,"to":217,"sanitized":235},{"from":222,"to":225,"sanitized":235},{"from":227,"to":230,"sanitized":235},"low",{"summary":255,"deductions":256},"The gostats-for-wordpress plugin, version 1.4, exhibits a mixed security posture.  On the positive side, the plugin demonstrates excellent practices regarding database interactions, utilizing prepared statements exclusively and showing no file operations or external HTTP requests.  Furthermore, there is no recorded vulnerability history, suggesting a relatively stable codebase.  However, a significant concern arises from the static analysis, where 100% of the observed output operations are not properly escaped. This presents a substantial risk of Cross-Site Scripting (XSS) vulnerabilities, as user-supplied data displayed on the frontend could be manipulated to inject malicious scripts.\n\nThe taint analysis indicates two flows with unsanitized paths, which, while not classified as critical or high severity in this instance, warrant attention. These flows, combined with the lack of output escaping, could potentially be chained with other vectors to exploit vulnerabilities.  The absence of AJAX handlers, REST API routes, shortcodes, and cron events from the attack surface is a positive indicator, reducing the plugin's immediate exposure.  However, the critical lack of output escaping significantly undermines the overall security, making it a primary area of concern that needs immediate remediation.",[257,259,261],{"reason":258,"points":11},"100% of output not properly escaped",{"reason":260,"points":62},"Taint flow with unsanitized path",{"reason":262,"points":62},"Second taint flow with unsanitized path","2026-03-16T23:04:02.689Z",{"wat":265,"direct":274},{"assetPaths":266,"generatorPatterns":269,"scriptPaths":270,"versionParams":273},[267,268],"\u002Fwp-content\u002Fplugins\u002Fgostats-for-wordpress\u002Fjs\u002Fcounter.wp.js","\u002Fwp-content\u002Fplugins\u002Fgostats-for-wordpress\u002Fjs\u002Fclickmap\u002Fclickmap.js",[],[271,272],"\u002F\u002Fgostats.com\u002Fjs\u002Fcounter.wp.js","\u002F\u002Fgostats.com\u002Fjs\u002Fclickmap\u002Fclickmap.js",[],{"cssClasses":275,"htmlComments":277,"htmlAttributes":281,"restEndpoints":283,"jsGlobals":284,"shortcodeOutput":290},[276],"gostats-code-for-wordpress-target",[278,279,280],"\u003C!-- GoStats.com -->","\u003C!-- GoStats JavaScript Based Code -->","\u003C!-- End GoStats JavaScript Based Code -->",[282],"id=\"gostats-code-for-wordpress-target\"",[],[285,286,287,288,289],"_gos","_goa","_got","_goi","_gol",[]]