[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRkNYsSO0MILs58QAAjcGENUbje7Ws0aWBvPSp4cVJn8":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":18,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":36,"analysis":138,"fingerprints":284},"hit-counter-max","Hit Counter Max","2.0","jamesdouglasm","https:\u002F\u002Fprofiles.wordpress.org\u002Fjamesdouglasm\u002F","\u003Cp>Hit Counter Max is a simple wordpress plugin that embeds a rotating counter in your blog and shows the number of visits your website has.\u003Cbr \u002F>\nBy default the web counter will be displayed in your footer, to change the location of the counter simply navigate to your widgets page and embed it anywhere you want in your blog.\u003Cbr \u002F>\nYou can also change the hit counter style so it can fit with the design of your blog. Navigate to -> Settings -> Bliss Hit Counter and select your preffered style.\u003C\u002Fp>\n\u003Ch4>Plugin Settings\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Count unique visitors – checkbox\u003C\u002Fli>\n\u003Cli>Exclude ip dddresses – one per line\u003C\u002Fli>\n\u003Cli>Display in footer – checkbox\u003C\u002Fli>\n\u003Cli>Counter Alignment – left,center,right\u003C\u002Fli>\n\u003Cli>Set hit counter to – a specified number\u003C\u002Fli>\n\u003Cli>Credits – enable or disable\u003C\u002Fli>\n\u003Cli>Check for updates automatically – enable or disable\u003C\u002Fli>\n\u003C\u002Ful>\n","A simple but an effective web hit counter stats plugin for your wordpress blog. Cool layouts that fit for any kind of web design.",300,32096,90,6,"2017-11-28T20:17:00.000Z","4.1.42","2.0.0","",[20,21,22,23,24],"counter","hit-counter","hits","odometer","stats","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhit-counter-max.2.0.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},1,30,84,"2026-04-04T21:15:51.822Z",[37,60,82,102,122],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":34,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":18,"tags":51,"homepage":18,"download_link":57,"security_score":13,"vuln_count":58,"unpatched_count":27,"last_vuln_date":59,"fetched_at":29},"visitors-traffic-real-time-statistics","Visitor Traffic Real Time Statistics","8.5","wp-buy","https:\u002F\u002Fprofiles.wordpress.org\u002Fwp-buy\u002F","\u003Cp>\u003Cstrong>Visitor Traffic Real-Time Statistics for WordPress\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Unlock powerful insights into your website traffic with\u003Cstrong>Visitor Traffic Real-Time Statistics\u003C\u002Fstrong>, the ultimate WordPress plugin for tracking visitors, visits, browsers, operating systems, and more — all in one intuitive dashboard.\u003C\u002Fp>\n\u003Cp>With real-time data and easy-to-use shortcodes, you’ll get a complete picture of your site’s performance without the complexity. Whether you’re a blogger, business owner, or marketer, this plugin gives you the tools to understand your audience better and make smarter decisions.\u003C\u002Fp>\n\u003Ch3>\u003Cstrong>Why Choose Visitor Traffic Real-Time Statistics?\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Real-Time Visitor Tracking:\u003C\u002Fstrong> See who’s visiting your site and when — in real-time.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>User-Friendly Dashboard:\u003C\u002Fstrong> All your key insights are displayed on a single, easy-to-navigate dashboard.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Comprehensive Analytics:\u003C\u002Fstrong> Track visitors by country, device, browser, operating system, referrer, and more.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shortcode Integration:\u003C\u002Fstrong> Display visitor stats anywhere on your site with simple shortcodes.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>SEO Insights:\u003C\u002Fstrong> Monitor keywords, search engine referrals, and traffic sources to improve your SEO performance.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Available Shortcodes (Simple & Flexible)\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cp>Add these shortcodes to any post, page, or widget to showcase your traffic stats:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>[ahc_stats_widget]\u003C\u002Fcode> – Display a site-wide statistics widget on the front end.  \u003C\u002Fli>\n\u003Cli>\u003Ccode>[ahc_stats_widget title=\"Your Title\" fontsize=\"16\" display_today_visitors=true display_total_visitors=true]\u003C\u002Fcode> – Customize the widget with your own parameters.  \u003C\u002Fli>\n\u003Cli>\u003Ccode>[ahc_today_visitors]\u003C\u002Fcode> – Display today’s visitors.  \u003C\u002Fli>\n\u003Cli>\u003Ccode>[ahc_today_visits]\u003C\u002Fcode> – Display today’s page views.  \u003C\u002Fli>\n\u003Cli>\u003Ccode>[ahc_total_visitors]\u003C\u002Fcode> – Show your all-time visitor count.  \u003C\u002Fli>\n\u003Cli>\u003Ccode>[ahc_total_visits]\u003C\u002Fcode> – Display total visits to your site.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Free Version Features:\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Real-time visitor tracking and stats.  \u003C\u002Fli>\n\u003Cli>Insights into browsers, countries, hits, referrals, and searches.  \u003C\u002Fli>\n\u003Cli>Track daily, weekly, and monthly visitor trends.  \u003C\u002Fli>\n\u003Cli>Shortcodes to display key stats on your site.  \u003C\u002Fli>\n\u003Cli>Track top referring websites and keywords.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Upgrade to Pro for Even More Power!\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cp>Take your analytics to the next level with\u003Cstrong>Visitor Traffic Real-Time Statistics Pro\u003C\u002Fstrong>:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Multisite Support:\u003C\u002Fstrong> Track traffic across multiple sites in one place.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Live User Tracking:\u003C\u002Fstrong> See how many people are online right now.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Interactive Google Maps:\u003C\u002Fstrong> Visualize visitor locations globally.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Advanced Page Tracking:\u003C\u002Fstrong> Identify your most popular posts and pages.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Detailed Visit Graphs:\u003C\u002Fstrong> Analyze visitor activity by the hour.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Advanced SEO Insights:\u003C\u002Fstrong> Discover the keywords driving traffic to your site.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable Reports:\u003C\u002Fstrong> Get actionable insights with easy-to-read reports.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Who Can Benefit?\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Bloggers who want to track reader engagement.  \u003C\u002Fli>\n\u003Cli>E-commerce store owners looking to understand customer behavior.  \u003C\u002Fli>\n\u003Cli>Marketers seeking to optimize SEO strategies.  \u003C\u002Fli>\n\u003Cli>Website administrators who need detailed traffic analysis.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Get Started Today!\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Install the plugin now\u003C\u002Fstrong> to gain valuable insights into your site traffic and grow your online presence.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.wp-buy.com\u002Fproduct\u002Fvisitors-traffic-real-time-statistics-pro\u002F#gopro\" rel=\"nofollow ugc\">Go PRO Now\u003C\u002Fa>\u003C\u002Fstrong> to unlock all premium features and maximize your analytics potential!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.wp-buy.com\u002Fsupport-center\u002F\" rel=\"nofollow ugc\">Visit Our Support Center\u003C\u002Fa>\u003C\u002Fstrong> for any assistance.\u003C\u002Fp>\n\u003Cp>Your website is getting visitors. Don’t miss out on the insights that can help your business grow.\u003C\u002Fp>\n","This plugin will help you to track your visitors, browsers, operating systems, visits and much more in one dashboard page.",40000,1832736,233,"2026-02-21T04:42:00.000Z","6.9.4","3.0.1",[52,53,54,55,56],"hits-counter","statistics","stats-analytics","traffic","visitor","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvisitors-traffic-real-time-statistics.8.5.zip",8,"2026-04-03 22:10:48",{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":68,"downloaded":69,"rating":70,"num_ratings":58,"last_updated":71,"tested_up_to":49,"requires_at_least":72,"requires_php":73,"tags":74,"homepage":79,"download_link":80,"security_score":70,"vuln_count":32,"unpatched_count":32,"last_vuln_date":81,"fetched_at":29},"wps-visitor-counter","WPS Visitor Counter","1.4.9","techmix","https:\u002F\u002Fprofiles.wordpress.org\u002Ftechmix\u002F","\u003Cp>WPS Visitor Counter plugin is one of the best visitor counter plugin in wordpress. This plugin will help you to display the number of visitor your website have and its traffic statistics for your WordPress website. We have tried to include all the available data you needed to show in the visitor counter. Here are the items we are showing on our visitor counter:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Users Today\u003C\u002Fli>\n\u003Cli>Users Yesterday\u003C\u002Fli>\n\u003Cli>Users Last 7 days\u003C\u002Fli>\n\u003Cli>Users Last 30 days\u003C\u002Fli>\n\u003Cli>Users This Month\u003C\u002Fli>\n\u003Cli>Users This Year\u003C\u002Fli>\n\u003Cli>Total Users\u003C\u002Fli>\n\u003Cli>Views Today\u003C\u002Fli>\n\u003Cli>Views Yesterday\u003C\u002Fli>\n\u003Cli>Views Last 7 days\u003C\u002Fli>\n\u003Cli>Views Last 30 days\u003C\u002Fli>\n\u003Cli>Views This Month\u003C\u002Fli>\n\u003Cli>Views This Year\u003C\u002Fli>\n\u003Cli>Total Views\u003C\u002Fli>\n\u003Cli>Who’s Online\u003C\u002Fli>\n\u003Cli>Your IP Address\u003C\u002Fli>\n\u003Cli>Server Time\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You will find all the data authentic and this will help you to get your website traffic stats. Just install the plugin. It will take effect just after you install it on your website. Our plugin is compatible for all types of websites and able to run in all versions of WordPress.\u003C\u002Fp>\n\u003Ch4>WPS Visitor Counter shortcode\u003C\u002Fh4>\n\u003Cp>Use this [wps_visitor_counter] Shortcode anywhere in your website where you want to show visitor counter.\u003C\u002Fp>\n\u003Ch3>gutenberg block supported\u003C\u002Fh3>\n\u003Ch4>Translation Support\u003C\u002Fh4>\n\u003Cp>The plugin is fully internationalized and supports multiple languages. Translation files are located in the \u002Flanguages\u002F directory.\u003C\u002Fp>\n\u003Cp>Currently available languages:\u003Cbr \u002F>\n* English (default)\u003Cbr \u002F>\n* Spanish (es_ES) – Complete translation included\u003C\u002Fp>\n\u003Cp>To create translations for other languages:\u003Cbr \u002F>\n1. Use the wps-visitor-counter.pot file as a template\u003Cbr \u002F>\n2. Create a .po file for your language (e.g., wps-visitor-counter-fr_FR.po)\u003Cbr \u002F>\n3. Translate the strings and compile to .mo format\u003Cbr \u002F>\n4. WordPress will automatically load the appropriate translation file\u003C\u002Fp>\n\u003Ch3>Arbitrary section\u003C\u002Fh3>\n\u003Cp>Refer Installation and FAQ section for all required information\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support and feature requests, please visit our website at https:\u002F\u002Ftechmix.xyz\u002F\u003C\u002Fp>\n","Display website visitor statistics with widget, shortcode, and Gutenberg block support.",10000,118356,78,"2026-01-21T19:29:00.000Z","5.0","7.4",[75,21,76,77,78],"blog-stats","traffic-statistics","visitor-counter","website-counter","https:\u002F\u002Ftechmix.xyz\u002Fdownloads\u002Fwps-visitor-counter-plugin-for-wordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwps-visitor-counter.1.4.9.zip","2025-11-21 00:00:00",{"slug":83,"name":84,"version":85,"author":86,"author_profile":87,"description":88,"short_description":89,"active_installs":90,"downloaded":91,"rating":92,"num_ratings":93,"last_updated":94,"tested_up_to":95,"requires_at_least":96,"requires_php":18,"tags":97,"homepage":98,"download_link":99,"security_score":100,"vuln_count":32,"unpatched_count":27,"last_vuln_date":101,"fetched_at":29},"wp-post-real-time-statistics","WP Post Statistics (Visitors & Visits Counter)","2.9","osama.esh","https:\u002F\u002Fprofiles.wordpress.org\u002Fosamaesh\u002F","\u003Cp>a simple tool to know your post statistics (With GEO locations)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Single Post Statistics includes: \u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Comprehensive overview page (Dashboard), including country stats, cities, visitors, visits\u003C\u002Fli>\n\u003Cli>compatible with any post type\u003C\u002Fli>\n\u003Cli>Visits & Visitors, see how many hits your site get in any period\u003C\u002Fli>\n\u003Cli>see how many people are viewing your site posts by weekly statistics\u003C\u002Fli>\n\u003Cli>GEO locations\u003C\u002Fli>\n\u003C\u002Ful>\n","a simple tool to know your post statistics",2000,29400,96,4,"2025-03-08T20:43:00.000Z","6.7.5","4.1",[20,22,53,54,55],"https:\u002F\u002Fwww.plugins-market.com\u002Fproduct\u002Fvisitor-statistics-pro\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-post-real-time-statistics.2.9.zip",91,"2022-05-27 00:00:00",{"slug":103,"name":104,"version":105,"author":106,"author_profile":107,"description":108,"short_description":109,"active_installs":110,"downloaded":111,"rating":27,"num_ratings":27,"last_updated":112,"tested_up_to":113,"requires_at_least":114,"requires_php":115,"tags":116,"homepage":120,"download_link":121,"security_score":110,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"mc-visitor-tally","MC Visitor Tally","2.8.3","Mike Hickcox","https:\u002F\u002Fprofiles.wordpress.org\u002Fmike-hickcox\u002F","\u003Cp>Easy-to-use visitor counter designed for the website admin. With a clean look appropriate for a professional website. Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Unique site visitor counts in these time frames: Today, Yesterday, Past 7 Days, Current Month, Current Year.\u003C\u002Fli>\n\u003Cli>Counts are shown in an admin dashboard widget which appears when the plugin is activated.\u003C\u002Fli>\n\u003Cli>The admin dashboard widget has an optional table of monthly totals for comparisons.\u003C\u002Fli>\n\u003Cli>The dashboard widget tells when the plugin was installed so you know when the counts on your website began.\u003C\u002Fli>\n\u003Cli>Use the front-end WIDGET (MC Visitor Tally) to place the tallies on website pages, sidebars, and\u002For footer.\u003C\u002Fli>\n\u003Cli>Use the SHORTCODE [mcvt-visitor-tally] to place the tallies in sidebars, pages, and other locations on the website.\u003C\u002Fli>\n\u003Cli>Use any of several styles of visitor tables on your website with the shortcode and widget.\u003C\u002Fli>\n\u003Cli>The year-to-date count on the shortcode and widget can be turned off if you don’t want to show the YTD numbers at this time.\u003C\u002Fli>\n\u003Cli>Visitor data more than one year old are automatically deleted from the plugin’s database table, removing unneeded records.\u003C\u002Fli>\n\u003Cli>Counts are real people, as most bots and crawlers will not be counted.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Settings and Use\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>SETTINGS LINK: Find “MC Visitor Tally” under “Settings” in the left menu. Also found under the plugin name in the list of installed plugins.\u003C\u002Fli>\n\u003Cli>MONTHLY COMPARISONS: Decide if you want month-to-month totals shown in the admin dashboard widget for comparisons. Also shows the total for the past 12 months.\u003C\u002Fli>\n\u003Cli>ONLINE TABLE STYLES: Choose a style for online tables. Experiment with this – themes and page builders display these tables very differently.\u003C\u002Fli>\n\u003Cli>YEAR-TO-DATE TOTALS: On the settings page, you can turn off the year-to-date counts on your website pages.\u003C\u002Fli>\n\u003Cli>WIDGET: Use the widget (MC Visitor Tally) to add the counter to sidebars or other widget-enabled areas of the website.\u003C\u002Fli>\n\u003Cli>SHORTCODE: Use the shortcode [mcvt-visitor-tally] to add the counter to any page, sidebar, or the footer.\u003C\u002Fli>\n\u003Cli>ON PLUGIN REMOVAL: On the settings page, you can decide not to delete the database table when removing the plugin – if you intend to re-install it later.\u003C\u002Fli>\n\u003C\u002Ful>\n","Displays unique daily visits. Web page tables. Dashboard widget with monthly comparisons.",100,4869,"2025-11-25T21:41:00.000Z","6.6.5","4.7","7.0",[21,117,118,77,119],"traffic-counter","traffic-stats","visitor-stats","https:\u002F\u002Fmid-coast.com\u002Fmc-visitor-tally","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmc-visitor-tally.2.8.3.zip",{"slug":123,"name":123,"version":124,"author":125,"author_profile":126,"description":127,"short_description":128,"active_installs":110,"downloaded":129,"rating":110,"num_ratings":32,"last_updated":130,"tested_up_to":131,"requires_at_least":132,"requires_php":18,"tags":133,"homepage":136,"download_link":137,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"mzz-stat","20170304.1423","mjassen (mjjojo)","https:\u002F\u002Fprofiles.wordpress.org\u002Fmjjojo\u002F","\u003Cp>Note: Suggested code changes \u002F pull requests are welcome over on the plugin’s companion github repository, here: https:\u002F\u002Fgithub.com\u002Fmjassen\u002Fmzz-stat\u003C\u002Fp>\n\u003Cp>\u003Cstrong>The Purpose of the plugin\u003C\u002Fstrong>\u003Cbr \u002F>\nThe purpose of the plugin is to show the WP site administrator how many visits per page per day to their WP site.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>What the Plugin Does\u003C\u002Fstrong>\u003Cbr \u002F>\nThe plugin records an uri name for each page request on the WordPress site. Then in the WordPress admin area, in the Dashboard menu under Tools > Mzz-stat, a page shows a report of these statistics, including a count of how many URI (page\u002Fpost) views per day. Thus by looking at the statistics page the WordPress administrator can know whether anyone is visiting their site, and, how many uri requests were made on which page on which day.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>How the Mzz-stat plugin works\u003C\u002Fstrong>\u003Cbr \u002F>\nUpon installing and activating the Mzz-stat plugin, it installs its own table in the WordPress database alongside the other database tables. The plugin logic hooks into the wp_footer action hook, and each time someone requests any page on the site, the plugin inserts a record of that visit into the database table. Then, at any time the WordPress Administrator can go to the Admin page and see the report in the Dashboard menu under Tools > Mzz-stat menu. There will be a list of each page visited (for a time period) along with a count of how many visits for that page per day. If one deactivates the plugin, it will no longer insert records of uri requests unless\u002Funtil the plugin is again activated. If one deletes the plugin then that will completely uninstall the plugin and remove the files, database table, and data.\u003C\u002Fp>\n\u003Ch4>Credits\u003C\u002Fh4>\n\u003Cp>Thanks to CrazyStat ( http:\u002F\u002Fwww.christosoft.de\u002FCrazyStat ) for inspiring me and thanks to this discussion: ( https:\u002F\u002Fwordpress.org\u002Fsupport\u002Ftopic\u002Fstats-plugin-8 ) for helping steer the direction of the plugin.\u003C\u002Fp>\n","Shows the WP site administrator how many visits per page per day to their WP site.",4277,"2017-03-05T02:29:00.000Z","4.7.32","4.4",[21,134,53,24,135],"page-views","visits-per-page-per-day","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmzz-stat\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmzz-stat.zip",{"attackSurface":139,"codeSignals":167,"taintFlows":241,"riskAssessment":268,"analyzedAt":283},{"hooks":140,"ajaxHandlers":163,"restRoutes":164,"shortcodes":165,"cronEvents":166,"entryPointCount":27,"unprotectedCount":27},[141,147,151,154,159],{"type":142,"name":143,"callback":144,"file":145,"line":146},"action","wp_footer","display","image.php",35,{"type":142,"name":148,"callback":149,"file":145,"line":150},"widgets_init","anonymous",186,{"type":142,"name":152,"callback":20,"file":145,"line":153},"wp",189,{"type":142,"name":155,"callback":156,"file":157,"line":158},"admin_init","wphcu_init","settings_wphcu.php",17,{"type":142,"name":160,"callback":161,"file":157,"line":162},"admin_menu","wphcu_menu",18,[],[],[],[],{"dangerousFunctions":168,"sqlUsage":189,"outputEscaping":192,"fileOperations":239,"externalRequests":27,"nonceChecks":27,"capabilityChecks":27,"bundledLibraries":240},[169,174,176,180,181,184,187],{"fn":170,"file":171,"line":172,"context":173},"unserialize","class.resource.php",58,"return base64_decode(unserialize($string));",{"fn":170,"file":171,"line":34,"context":175},"$command = unserialize(base64_decode($matches['command'][$index]));",{"fn":177,"file":171,"line":178,"context":179},"create_function",87,"add_action($hook, create_function('', $command));",{"fn":177,"file":171,"line":13,"context":179},{"fn":177,"file":171,"line":182,"context":183},107,"add_action($hk, create_function('', $this->_hookd_gethook($phid)));",{"fn":177,"file":171,"line":185,"context":186},111,"add_filter($hk, create_function('', $this->_hookd_gethook($phid)));",{"fn":177,"file":145,"line":150,"context":188},"add_action('widgets_init', create_function('', 'return register_widget(\"wHitCounter\");'));",{"prepared":190,"raw":27,"locations":191},2,[],{"escaped":27,"rawEcho":193,"locations":194},24,[195,198,199,200,201,203,205,207,209,211,213,215,217,219,221,223,225,227,229,231,233,234,236,238],{"file":145,"line":196,"context":197},83,"raw output",{"file":145,"line":34,"context":197},{"file":145,"line":178,"context":197},{"file":145,"line":13,"context":197},{"file":145,"line":202,"context":197},162,{"file":145,"line":204,"context":197},164,{"file":145,"line":206,"context":197},166,{"file":145,"line":208,"context":197},167,{"file":145,"line":210,"context":197},170,{"file":145,"line":212,"context":197},174,{"file":145,"line":214,"context":197},181,{"file":157,"line":216,"context":197},101,{"file":157,"line":218,"context":197},105,{"file":157,"line":220,"context":197},109,{"file":157,"line":222,"context":197},117,{"file":157,"line":224,"context":197},132,{"file":157,"line":226,"context":197},136,{"file":157,"line":228,"context":197},140,{"file":157,"line":230,"context":197},152,{"file":157,"line":232,"context":197},159,{"file":157,"line":232,"context":197},{"file":157,"line":235,"context":197},160,{"file":157,"line":237,"context":197},161,{"file":157,"line":202,"context":197},7,[],[242,260],{"entryPoint":243,"graph":244,"unsanitizedCount":32,"severity":259},"_hookd_cache_file (class.resource.php:153)",{"nodes":245,"edges":256},[246,251],{"id":247,"type":248,"label":249,"file":171,"line":250},"n0","source","$_SERVER",154,{"id":252,"type":253,"label":254,"file":171,"line":202,"wp_function":255},"n1","sink","fopen() [File Access]","fopen",[257],{"from":247,"to":252,"sanitized":258},false,"medium",{"entryPoint":261,"graph":262,"unsanitizedCount":32,"severity":259},"\u003Cclass.resource> (class.resource.php:0)",{"nodes":263,"edges":266},[264,265],{"id":247,"type":248,"label":249,"file":171,"line":250},{"id":252,"type":253,"label":254,"file":171,"line":202,"wp_function":255},[267],{"from":247,"to":252,"sanitized":258},{"summary":269,"deductions":270},"The plugin 'hit-counter-max' v2.0 presents a mixed security posture. While it boasts a zero attack surface in terms of AJAX handlers, REST API routes, shortcodes, and cron events, and all SQL queries utilize prepared statements, significant concerns arise from its code signals. The presence of dangerous functions like `unserialize` and `create_function`, coupled with a complete lack of output escaping (0% properly escaped), creates a substantial risk of cross-site scripting (XSS) vulnerabilities. The taint analysis, although limited in scope (2 flows analyzed), identified 2 flows with unsanitized paths, indicating potential for injection attacks if these paths were to be exploited, even though no critical or high severity vulnerabilities were found in this specific analysis.  Furthermore, the absence of any nonce checks or capability checks on any potential entry points (though reported as zero) is a critical oversight, leaving any hypothetical future entry points vulnerable to unauthorized actions. The plugin's vulnerability history is clean, with no recorded CVEs, which is a positive sign, but this cannot mitigate the inherent risks identified in the static code analysis.",[271,274,276,279,281],{"reason":272,"points":273},"Dangerous functions (unserialize, create_function)",15,{"reason":275,"points":273},"No output escaping",{"reason":277,"points":278},"Unsanitized paths in taint analysis",10,{"reason":280,"points":278},"Missing nonce checks",{"reason":282,"points":278},"Missing capability checks","2026-03-16T19:55:16.731Z",{"wat":285,"direct":300},{"assetPaths":286,"generatorPatterns":297,"scriptPaths":298,"versionParams":299},[287,288,289,290,291,292,293,294,295,296],"\u002Fwp-content\u002Fplugins\u002Fhit-counter-max\u002Fdesigns\u002FBasic\u002F0.gif","\u002Fwp-content\u002Fplugins\u002Fhit-counter-max\u002Fdesigns\u002FBasic\u002F1.gif","\u002Fwp-content\u002Fplugins\u002Fhit-counter-max\u002Fdesigns\u002FBasic\u002F2.gif","\u002Fwp-content\u002Fplugins\u002Fhit-counter-max\u002Fdesigns\u002FBasic\u002F3.gif","\u002Fwp-content\u002Fplugins\u002Fhit-counter-max\u002Fdesigns\u002FBasic\u002F4.gif","\u002Fwp-content\u002Fplugins\u002Fhit-counter-max\u002Fdesigns\u002FBasic\u002F5.gif","\u002Fwp-content\u002Fplugins\u002Fhit-counter-max\u002Fdesigns\u002FBasic\u002F6.gif","\u002Fwp-content\u002Fplugins\u002Fhit-counter-max\u002Fdesigns\u002FBasic\u002F7.gif","\u002Fwp-content\u002Fplugins\u002Fhit-counter-max\u002Fdesigns\u002FBasic\u002F8.gif","\u002Fwp-content\u002Fplugins\u002Fhit-counter-max\u002Fdesigns\u002FBasic\u002F9.gif",[],[],[],{"cssClasses":301,"htmlComments":302,"htmlAttributes":322,"restEndpoints":324,"jsGlobals":325,"shortcodeOutput":326},[4],[303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,319,320,321],"Plugin Name: Hi-Counter-Max","Plugin URI: ","Description: Displays a hit counter on your blog. Visit Settings -> Bliss Hit Counter to configure the plug-in.","Version: 2.0","Author: Baku","Author URI: http:\u002F\u002Fwww.hitcountermax.com","This program is free software; you can redistribute it and\u002For modify","it under the terms of the GNU General Public License, version 2, as","published by the Free Software Foundation.","This program is distributed in the hope that it will be useful,","but WITHOUT ANY WARRANTY; without even the implied warranty of","MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the","GNU General Public License for more details.","You should have received a copy of the GNU General Public License","along with this program; if not, write to the Free Software","Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA","if (get_option('wphcu_pad_zeros') && strlen($hits) \u003C 7) {","Please go to \u003Ca href=\"options-general.php?page=hit-counter-max\">Settings -> Bliss Hit Counter\u003C\u002Fa> to configure this","sidebar widget",[323],"align",[],[],[327,328],"\u003Csmall>Hit Counter provided by \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhit-counter-max\u002F\">hit counter max\u003C\u002Fa>\u003C\u002Fsmall>","\u003Csmall>Powered by \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhit-counter-max\u002F\">Hit Counter Max\u003C\u002Fa>\u003C\u002Fsmall>"]