[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZ4BOGQ6UatObkQd9GczaxTCqYbPDMCWTt4auvKSgGKQ":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":48,"crawl_stats":37,"alternatives":52,"analysis":145,"fingerprints":227},"metricool","Metricool","1.26","juan.pablo.tejela","https:\u002F\u002Fprofiles.wordpress.org\u002Fjuanpablotejela\u002F","\u003Cp>This plugin allows you to connect your blog or web based on WordPress with Metricool. Metricool is a tool that provides metrics and analytics about your blog and your social profiles. Using Metricool you can schedule your tweets or your posts in Facebook.\u003C\u002Fp>\n\u003Cp>This plugin installs a Javascript tracking code in the footer of your public pages. This code registers the pages viewed by your visitors in Metricool. If you want to interrupt the conexion between your blog and Metricool, you can disable the plugin or remove the Metricool identifier configured in the plugin settings window.\u003C\u002Fp>\n\u003Cp>To use this plugin it is required to be a registered user of Metricool (http:\u002F\u002Fmetricool.com\u002F).\u003C\u002Fp>\n\u003Cp>You can follow us on Twitter: http:\u002F\u002Ftwitter.com\u002Fmetricool\u002F\u003C\u002Fp>\n","Metricool is the first tool designed to measure #Blog impact and #SocialMedia activity.",80000,780312,78,7,"2026-02-02T15:17:00.000Z","6.9.4","3.6","",[20,21,4,22,23],"analytics","blog","metrics","tracking","https:\u002F\u002Fmetricool.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmetricool.zip",100,1,0,"2022-12-20 00:00:00","2026-03-15T15:16:48.613Z",[32],{"id":33,"url_slug":34,"title":35,"description":36,"plugin_slug":4,"theme_slug":37,"affected_versions":38,"patched_in_version":39,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":29,"updated_date":44,"references":45,"days_to_patch":47},"CVE-2022-4299","metricool-authenticated-administrator-stored-stored-cross-site-scripting","Metricool \u003C= 1.17 - Authenticated (Administrator+) Stored Stored Cross-Site Scripting","The Metricool plugin for WordPress is vulnerable to Stored Cross-Site Scripting via some of its settings parameters in versions up to, and including, 1.17 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.",null,"\u003C=1.17","1.18","medium",5.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-01-22 19:56:02",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fe36e5099-c5ff-4794-b7df-25d8eab27bac?source=api-prod",399,{"slug":49,"display_name":7,"profile_url":8,"plugin_count":27,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":47,"trust_score":50,"computed_at":51},"juanpablotejela",79,"2026-04-04T00:35:45.062Z",[53,71,91,109,125],{"slug":54,"name":55,"version":56,"author":54,"author_profile":57,"description":58,"short_description":59,"active_installs":26,"downloaded":60,"rating":28,"num_ratings":28,"last_updated":61,"tested_up_to":62,"requires_at_least":63,"requires_php":64,"tags":65,"homepage":68,"download_link":69,"security_score":70,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"segmetrics","SegMetrics Marketing Analytics","1.1.3","https:\u002F\u002Fprofiles.wordpress.org\u002Fsegmetrics\u002F","\u003Ch3>\u003Ca href=\"https:\u002F\u002Fsegmetrics.io\" rel=\"nofollow ugc\">SegMetrics\u003C\u002Fa> is the premier analytics platform for marketing professionals.\u003C\u002Fh3>\n\u003Cp>With over 54 Million leads, $3.2 Billion in revenue, and half a million marketing campaigns, SegMetrics’ mission is to bring \u003Cstrong>smart\u003C\u002Fstrong>, \u003Cstrong>actionable\u003C\u002Fstrong>, data to marketers everywhere — without all the technical setup and hassle.\u003C\u002Fp>\n\u003Cp>SegMetrics connects to the marketing tools you already use to make sure that every dollar and lead is accounted for.\u003C\u002Fp>\n\u003Cp>Get 100% clarity on where your leads come from, how they act, and how much your marketing is really worth.\u003C\u002Fp>\n\u003Ch3>Let’s Get Started\u003C\u002Fh3>\n\u003Cp>Ready to start getting actionable insights into your marketing funnels? Here’s what you have to do next:\u003C\u002Fp>\n\u003Col>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsegmetrics.io\u002Fpricing\" rel=\"nofollow ugc\">Sign up for a SegMetrics account\u003C\u002Fa> (With 14-day free trial)\u003C\u002Fli>\n\u003Cli>Install the SegMetrics plugin, and select “SegMetrics” from the Settings menu in your WordPress sidebar.\u003C\u002Fli>\n\u003Cli>Enter your SegMetrics Account ID and API Key, click “Save Changes,” and you’re done!\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>If you need a little more help, check out our \u003Ca href=\"https:\u002F\u002Fdocs.segmetrics.io\u002Farticle\u002F50-installing-the-tracking-snippet\" rel=\"nofollow ugc\">documentation that walks you through installing the tracking snippet\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Now that you’re all set up, you’ll be able to access all of SegMetrics’ attribution features.\u003Cbr \u002F>\nHere’s how SegMetrics connects with your marketing funnels to deliver accurate revenue and lead attribution.\u003C\u002Fp>\n\u003Ch3>By installing the SegMetrics plugin, you’ll be able to do things like:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Analyze where leads are coming from\u003C\u002Fli>\n\u003Cli>Get return on ad spend for all your campaigns\u003C\u002Fli>\n\u003Cli>See exactly what pages a lead has visited and when\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Connect Your Favorite CRM, eCommerce and More\u003C\u002Fh4>\n\u003Cp>Easily connect your marketing platform with your ecommerce and all the other tools you use,\u003Cbr \u002F>\nincluding Infusionsoft, Ontraport, ActiveCampaign, Google Ads, Facebook, MailChimp, Klaviyo and much more.\u003C\u002Fp>\n\u003Ch4>Accurate data you can trust\u003C\u002Fh4>\n\u003Cp>SegMetrics connects directly to your CRM — giving you 100% accuracy in your revenue and lead reporting.\u003Cbr \u002F>\nGet actionable insights without any coding, spreadsheet exporting, or pivot tables. Get answers to your burning questions in seconds.\u003C\u002Fp>\n\u003Cp>SegMetrics is used by direct marketers and SaaS companies in a number of niches.\u003Cbr \u002F>\nBut if there’s one thing that unites them all in their marketing endeavors, it’s a \u003Cstrong>need for accurate data\u003C\u002Fstrong>. SegMetrics is built on our deep understanding of reliably getting the metrics businesses need to stay profitable.\u003C\u002Fp>\n\u003Ch4>SegMetrics deciphers the data so you don’t have to.\u003C\u002Fh4>\n\u003Cp>We built SegMetrics to be reliable, simple to set up, and easy to read. Because no matter the size or type of your business, success shouldn’t depend on wrestling some sense out of confusing or conflicting data. Get back to making clear-headed, informed decisions. We’ll handle the numbers.\u003C\u002Fp>\n\u003Ch4>Get Access to ALL Your Data\u003C\u002Fh4>\n\u003Cp>As soon as you sign up with SegMetrics, you get access to all your data — not just the data after you sign up.\u003C\u002Fp>\n\u003Cp>Give current trends more context by comparing old ones, or get to the bottom of long-unanswered questions.\u003C\u002Fp>\n\u003Ch4>Support You Can Rely On\u003C\u002Fh4>\n\u003Cp>The SegMetrics support team has extensive experience working closely with clients to meet their reporting needs.\u003C\u002Fp>\n\u003Cp>If you have a question or issue, we’ll help resolve it ASAP – even if it’s technologically convoluted or completely specific to your business.\u003C\u002Fp>\n","Connect your SegMetrics account to get unparalleled insights into your visitor journey.",4437,"2025-03-14T22:20:00.000Z","6.7.5","4.9","5.6",[20,66,67,54,23],"infusionsoft","ontraport","https:\u002F\u002Fsegmetrics.io","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsegmetrics.1.1.4.zip",92,{"slug":72,"name":73,"version":74,"author":75,"author_profile":76,"description":77,"short_description":78,"active_installs":79,"downloaded":80,"rating":26,"num_ratings":81,"last_updated":82,"tested_up_to":83,"requires_at_least":84,"requires_php":18,"tags":85,"homepage":88,"download_link":89,"security_score":90,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"advanced-blog-metrics","Advanced Blog Metrics","1.5","Atalanta","https:\u002F\u002Fprofiles.wordpress.org\u002Fatalanta-agency\u002F","\u003Cp>Advanced Blog Metrics is an analytics tool dedicated to bloggers. This plugin allows you to improve your blog performance by tracking the following features:\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cp>Posts:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Total number of posts on your blog\u003C\u002Fli>\n\u003Cli>Average number of posts per day\u003C\u002Fli>\n\u003Cli>Average number of words per post\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Comments:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Total number of comments on your blog\u003C\u002Fli>\n\u003Cli>Average number of comments per day\u003C\u002Fli>\n\u003Cli>Average number of comments per post\u003C\u002Fli>\n\u003Cli>Average number of words per comment\u003C\u002Fli>\n\u003Cli>5 authors who comment the most\u003C\u002Fli>\n\u003Cli>5 posts which generate the most comments\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Best time to publish:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>When do your posts generate the most comments?\u003C\u002Fli>\n\u003Cli>When do you post the most?\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Facebook:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>5 posts which generate the most Facebook shares and likes\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Multilanguage:\u003Cbr \u002F>\n*   English\u003Cbr \u002F>\n*   Brazilian\u003Cbr \u002F>\n*   French\u003C\u002Fp>\n","Learn more about your readers and how they react to your posts. That way you could improve your blog performance.",50,5709,3,"2013-06-04T10:20:00.000Z","3.5.2","3.0.1",[86,87],"blog-analytics","blog-metrics","http:\u002F\u002Fwww.atalanta.fr\u002Fadvanced-blog-metrics-wordpress-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadvanced-blog-metrics.1.5.zip",85,{"slug":92,"name":93,"version":94,"author":95,"author_profile":96,"description":97,"short_description":98,"active_installs":99,"downloaded":100,"rating":28,"num_ratings":28,"last_updated":101,"tested_up_to":16,"requires_at_least":102,"requires_php":103,"tags":104,"homepage":107,"download_link":108,"security_score":26,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"romiltec-analytics-tracking","Romiltec Analytics Tracking","1.0.0","romiltecsrl","https:\u002F\u002Fprofiles.wordpress.org\u002Fromiltecsrl\u002F","\u003Cp>Romiltec Analytics Tracking provides seamless Matomo analytics integration for WordPress sites. The plugin automatically tracks Post IDs as Custom Dimension 1 on single post pages, allowing you to analyze individual content performance in your Matomo dashboard.\u003C\u002Fp>\n\u003Cp>Perfect for publishers, bloggers, and content marketers who want detailed insights into their content performance using self-hosted Matomo analytics.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Automatic Post ID Tracking – Post IDs are automatically tracked as Custom Dimension 1 on single post pages\u003C\u002Fli>\n\u003Cli>Matomo Integration – Full Matomo analytics integration with customizable URL and Site ID\u003C\u002Fli>\n\u003Cli>Scroll Depth Tracking – Automatically tracks user scroll depth at 25%, 50%, 75%, and 100% milestones\u003C\u002Fli>\n\u003Cli>Time on Page Tracking – Accurate time measurement with heartbeat timer (tracks active viewing time)\u003C\u002Fli>\n\u003Cli>Performance Optimized – Lightweight and cache-safe implementation\u003C\u002Fli>\n\u003Cli>Easy Configuration – Simple admin interface with validation\u003C\u002Fli>\n\u003Cli>Translation Ready – Full internationalization support\u003C\u002Fli>\n\u003Cli>Security First – Input sanitization and capability checks\u003C\u002Fli>\n\u003Cli>No External Dependencies – Works with your self-hosted Matomo installation\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>How It Works\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Install and activate the plugin\u003C\u002Fli>\n\u003Cli>Configure your Matomo URL and Site ID in Settings > Romiltec Analytics\u003C\u002Fli>\n\u003Cli>Set up Custom Dimension 1 in your Matomo dashboard\u003C\u002Fli>\n\u003Cli>The plugin automatically tracks all pageviews and sends Post IDs for single posts\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Active Matomo analytics installation (self-hosted or cloud)\u003C\u002Fli>\n\u003Cli>HTTPS recommended for security\u003C\u002Fli>\n\u003C\u002Ful>\n","Professional Matomo analytics integration with automatic Post ID tracking as custom dimensions.",30,115,"2026-02-09T15:09:00.000Z","5.0","7.4",[20,105,22,106,23],"matomo","statistics","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fromiltec-analytics-tracking\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fromiltec-analytics-tracking.1.0.0.zip",{"slug":110,"name":111,"version":112,"author":113,"author_profile":114,"description":115,"short_description":116,"active_installs":28,"downloaded":117,"rating":28,"num_ratings":28,"last_updated":118,"tested_up_to":119,"requires_at_least":120,"requires_php":18,"tags":121,"homepage":123,"download_link":124,"security_score":90,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"foxmetrics","FoxMetrics","1.0.1","FoxMetrics Team","https:\u002F\u002Fprofiles.wordpress.org\u002Ffoxmetricsteam\u002F","\u003Cp>FoxMetrics is software that helps you overcome the challenges with siloed systems and \u003Ca href=\"https:\u002F\u002Fwww.foxmetrics.com\u002Fproducts\u002F\" rel=\"nofollow ugc\">products\u003C\u002Fa>. It captures, stores, and unlocks data generated from the web, \u003Ca href=\"https:\u002F\u002Fwww.foxmetrics.com\u002Fblog\u002Fmobile-ecommerce-best-practices\u002F\" rel=\"nofollow ugc\">mobile\u003C\u002Fa>, and other sources and drive value from customer behavioral data.\u003C\u002Fp>\n\u003Cp>FoxMetrics is also a complete Google Analytics alternative that offers a full set of web analytics features, security, privacy, and more.\u003C\u002Fp>\n\u003Cp>This plugin automatically inserts your \u003Ca href=\"https:\u002F\u002Fwww.foxmetrics.com\u002F\" rel=\"nofollow ugc\">FoxMetrics\u003C\u002Fa> tracking code into each page of your website. To use this plugin, a FoxMetrics account is required, which provides you with an application ID that you will need during the installation of the plugin.\u003C\u002Fp>\n\u003Ch4>FoxMetrics Solutions:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Web Analytics\u003C\u002Fli>\n\u003Cli>Marketing Analytics\u003C\u002Fli>\n\u003Cli>Business Intelligence\u003C\u002Fli>\n\u003Cli>Unified Customer View\u003C\u002Fli>\n\u003Cli>ECommerce Analytics\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>FoxMetrics Features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Dashboards\u003C\u002Fli>\n\u003Cli>Insights\u003C\u002Fli>\n\u003Cli>Custom Report\u003C\u002Fli>\n\u003Cli>Raw Data Access (SQL)\u003C\u002Fli>\n\u003Cli>Custom Data Models\u003C\u002Fli>\n\u003Cli>Support for multiple data sources\u003C\u002Fli>\n\u003C\u002Ful>\n","FoxMetrics is software that helps you overcome the challenges with siloed systems and products. It captures, stores, and unlocks data generated from t &hellip;",908,"2021-10-21T08:43:00.000Z","5.8.13","3.0",[20,110,106,122,23],"stats","https:\u002F\u002Fwww.foxmetrics.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffoxmetrics.1.0.1.zip",{"slug":126,"name":127,"version":128,"author":129,"author_profile":130,"description":131,"short_description":132,"active_installs":133,"downloaded":134,"rating":135,"num_ratings":136,"last_updated":137,"tested_up_to":16,"requires_at_least":138,"requires_php":139,"tags":140,"homepage":143,"download_link":144,"security_score":26,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"ga-google-analytics","GA Google Analytics – Connect Google Analytics to WordPress","20260209","Jeff Starr","https:\u002F\u002Fprofiles.wordpress.org\u002Fspecialk\u002F","\u003Cblockquote>\n\u003Cp>✨ Connects Google Analytics to WordPress\u003Cbr \u002F>\n  ✨ Easily add Google Analytics 4 to your web pages\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>This plugin enables Google Analytics for your entire WordPress site. Lightweight and fast with plenty of great features.\u003C\u002Fp>\n\u003Ch3>🔥 Enable Google Analytics 4\u003C\u002Fh3>\n\u003Cp>Steps to enable Google Analytics 4:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Follow \u003Ca href=\"https:\u002F\u002Fsupport.google.com\u002Fanalytics\u002Fanswer\u002F9304153\" rel=\"nofollow ugc\">this guide\u003C\u002Fa> to create a GA4 account\u003C\u002Fli>\n\u003Cli>During account creation, you’ll get a tracking (measurement) ID\u003C\u002Fli>\n\u003Cli>Add your new tracking ID to the plugin setting, “GA Tracking ID”\u003C\u002Fli>\n\u003Cli>Select “GA4” for the plugin setting, “Tracking Method”\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Save changes and done. Wait 24-48 hours before viewing collected data in your GA account.\u003C\u002Fp>\n\u003Ch3>🔥 GA Tracking Options\u003C\u002Fh3>\n\u003Cp>Here are the tracking methods available with this plugin:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsupport.google.com\u002Fanalytics\u002Fanswer\u002F10089681\" rel=\"nofollow ugc\">GA4\u003C\u002Fa> \u002F Google Analytics 4 (default)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsupport.google.com\u002Fanalytics\u002Fanswer\u002F11583528\" rel=\"nofollow ugc\">Universal Analytics\u003C\u002Fa> (deprecated)\u003C\u002Fli>\n\u003Cli>Legacy Tracking (deprecated)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Note:\u003C\u002Fstrong> GA4 is recommended. Google has deprecated\u002Fdisabled all other tracking options.\u003C\u002Fp>\n\u003Ch3>🔥 GA Feature Support\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Supports \u003Ca href=\"https:\u002F\u002Fsupport.google.com\u002Fanalytics\u002Fanswer\u002F9304153\" rel=\"nofollow ugc\">Google Analytics 4\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Supports \u003Ca href=\"https:\u002F\u002Fsupport.google.com\u002Fanalytics\u002Fanswer\u002F2444872\" rel=\"nofollow ugc\">Display Advertising\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Supports \u003Ca href=\"https:\u002F\u002Fsupport.google.com\u002Fanalytics\u002Fanswer\u002F7377126\" rel=\"nofollow ugc\">Enhanced Link Attribution\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Supports \u003Ca href=\"https:\u002F\u002Fsupport.google.com\u002Fanalytics\u002Fanswer\u002F2763052\" rel=\"nofollow ugc\">IP Anonymization\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Supports \u003Ca href=\"https:\u002F\u002Fsupport.google.com\u002Fanalytics\u002Fanswer\u002F6385009\" rel=\"nofollow ugc\">Force SSL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Supports \u003Ca href=\"https:\u002F\u002Fsupport.google.com\u002Fanalytics\u002Fanswer\u002F12979939\" rel=\"nofollow ugc\">Google Optimize\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Supports \u003Ca href=\"https:\u002F\u002Fsupport.google.com\u002Fanalytics\u002Fanswer\u002F14275483\" rel=\"nofollow ugc\">Consent Signals\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Supports Tracker Objects (Universal Analytics)\u003C\u002Fli>\n\u003Cli>Supports User Opt-Out (Universal Analytics)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Also supports tracking links and conversions via the Custom Code setting. Learn more about \u003Ca href=\"https:\u002F\u002Fwww.google.com\u002Fanalytics\u002F\" rel=\"nofollow ugc\">Google Analytics\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>🔥 General Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Blazing fast performance\u003C\u002Fli>\n\u003Cli>Does one thing and does it well\u003C\u002Fli>\n\u003Cli>Drop-dead simple and easy to use\u003C\u002Fli>\n\u003Cli>Regularly updated and “future proof”\u003C\u002Fli>\n\u003Cli>Stays current with the latest tracking code\u003C\u002Fli>\n\u003Cli>Includes tracking code in header or footer\u003C\u002Fli>\n\u003Cli>Includes tracking code on all WordPress web pages\u003C\u002Fli>\n\u003Cli>Includes option to add your own custom markup\u003C\u002Fli>\n\u003Cli>Sleek plugin Settings page with toggling panels\u003C\u002Fli>\n\u003Cli>Option to disable tracking of admin-level users\u003C\u002Fli>\n\u003Cli>Option to enable page tracking in the Admin Area\u003C\u002Fli>\n\u003Cli>Works with or without Gutenberg Block Editor\u003C\u002Fli>\n\u003Cli>Easy to customize the tracking code\u003C\u002Fli>\n\u003Cli>More features available in the \u003Ca href=\"https:\u002F\u002Fplugin-planet.com\u002Fga-google-analytics-pro\u002F\" rel=\"nofollow ugc\">Pro version&nbsp;&raquo;\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This is a lightweight plugin that inserts the required GA tracking code. To view your site statistics, visit your Google Analytics account.\u003C\u002Fp>\n\u003Ch3>🔥 Pro Version\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fplugin-planet.com\u002Fga-google-analytics-pro\u002F\" rel=\"nofollow ugc\">GA Google Analytics Pro\u003C\u002Fa> includes the same features as the free version, PLUS the following:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Visitor Opt-Out Box (frontend UI)\u003C\u002Fli>\n\u003Cli>Configure multiple tracking codes\u003C\u002Fli>\n\u003Cli>Live Preview of all tracking codes\u003C\u002Fli>\n\u003Cli>Choose location of multiple tracking codes\u003C\u002Fli>\n\u003Cli>Supports Custom Code in header or footer\u003C\u002Fli>\n\u003Cli>Disable tracking of all logged-in users\u003C\u002Fli>\n\u003Cli>Disable Tracking for any Post IDs, User Roles, Post Types\u003C\u002Fli>\n\u003Cli>Disable Tracking for Search Results and Post Archives\u003C\u002Fli>\n\u003Cli>Display Opt-Out Box automatically or via shortcode\u003C\u002Fli>\n\u003Cli>Complete Inline Help\u002FDocumentation\u003C\u002Fli>\n\u003Cli>Priority plugin help and support\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>🚀 Learn more and get \u003Ca href=\"https:\u002F\u002Fplugin-planet.com\u002Fga-google-analytics-pro\u002F\" rel=\"nofollow ugc\">GA Pro &raquo;\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Privacy\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>User Data:\u003C\u002Fstrong> This plugin does not collect any user data. Even so, the tracking code added by this plugin is used by Google to collect all sorts of user data. You can learn more about Google Privacy \u003Ca href=\"https:\u002F\u002Fpolicies.google.com\u002Fprivacy\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Cookies:\u003C\u002Fstrong> This plugin uses simple cookies for the visitor Opt-Out Box to remember user preference for opt-in or out of Google Analytics.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Services:\u003C\u002Fstrong> This plugin does not connect to any third-party locations or services, but it does enable Google to collect all sorts of data.\u003C\u002Fp>\n\u003Cp>GA Google Analytics is developed and maintained by \u003Ca href=\"https:\u002F\u002Fx.com\u002Fperishable\" rel=\"nofollow ugc\">Jeff Starr\u003C\u002Fa>, 15-year \u003Ca href=\"https:\u002F\u002Fplugin-planet.com\u002F\" rel=\"nofollow ugc\">WordPress developer\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fbooks.perishablepress.com\u002F\" rel=\"nofollow ugc\">book author\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Support development\u003C\u002Fh3>\n\u003Cp>I develop and maintain this free plugin with love for the WordPress community. To show support, you can \u003Ca href=\"https:\u002F\u002Fmonzillamedia.com\u002Fdonate.html\" rel=\"nofollow ugc\">make a donation\u003C\u002Fa> or purchase one of my books:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwp-tao.com\u002F\" rel=\"nofollow ugc\">The Tao of WordPress\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdigwp.com\u002F\" rel=\"nofollow ugc\">Digging into WordPress\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fhtaccessbook.com\u002F\" rel=\"nofollow ugc\">.htaccess made easy\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwp-tao.com\u002Fwordpress-themes-book\u002F\" rel=\"nofollow ugc\">WordPress Themes In Depth\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbooks.perishablepress.com\u002Fdownloads\u002Fwizards-collection-sql-recipes-wordpress\u002F\" rel=\"nofollow ugc\">Wizard’s SQL Recipes for WordPress\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>And\u002For purchase one of my premium WordPress plugins:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fplugin-planet.com\u002Fbbq-pro\u002F\" rel=\"nofollow ugc\">BBQ Pro\u003C\u002Fa> – Blazing fast WordPress firewall\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fplugin-planet.com\u002Fblackhole-pro\u002F\" rel=\"nofollow ugc\">Blackhole Pro\u003C\u002Fa> – Automatically block bad bots\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fplugin-planet.com\u002Fbanhammer-pro\u002F\" rel=\"nofollow ugc\">Banhammer Pro\u003C\u002Fa> – Monitor traffic and ban the bad guys\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fplugin-planet.com\u002Fga-google-analytics-pro\u002F\" rel=\"nofollow ugc\">GA Google Analytics Pro\u003C\u002Fa> – Connect WordPress to Google Analytics\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fplugin-planet.com\u002Fhead-meta-pro\u002F\" rel=\"nofollow ugc\">Head Meta Pro\u003C\u002Fa> – Ultimate Meta Tags for WordPress\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fplugin-planet.com\u002Fsimple-ajax-chat-pro\u002F\" rel=\"nofollow ugc\">Simple Ajax Chat Pro\u003C\u002Fa> – Unlimited chat rooms\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fplugin-planet.com\u002Fusp-pro\u002F\" rel=\"nofollow ugc\">USP Pro\u003C\u002Fa> – Unlimited front-end forms\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Links, tweets and likes also appreciated. Thank you! 🙂\u003C\u002Fp>\n","Adds Google Analytics tracking code to your WordPress site. Supports many tracking features.",400000,9723797,98,158,"2026-02-09T15:54:00.000Z","4.7","5.6.20",[20,141,142,106,23],"google","google-analytics","https:\u002F\u002Fperishablepress.com\u002Fgoogle-analytics-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fga-google-analytics.20260209.zip",{"attackSurface":146,"codeSignals":170,"taintFlows":191,"riskAssessment":218,"analyzedAt":226},{"hooks":147,"ajaxHandlers":166,"restRoutes":167,"shortcodes":168,"cronEvents":169,"entryPointCount":28,"unprotectedCount":28},[148,154,158,163],{"type":149,"name":150,"callback":151,"file":152,"line":153},"action","admin_init","registerSettings","metricool.php",45,{"type":149,"name":155,"callback":156,"file":152,"line":157},"admin_menu","adminPanelsAndMetaBoxes",46,{"type":149,"name":159,"callback":160,"priority":161,"file":152,"line":162},"admin_bar_menu","adminCustomMenu",1000,47,{"type":149,"name":164,"callback":165,"file":152,"line":79},"wp_footer","frontendFooter",[],[],[],[],{"dangerousFunctions":171,"sqlUsage":172,"outputEscaping":174,"fileOperations":28,"externalRequests":28,"nonceChecks":27,"capabilityChecks":28,"bundledLibraries":190},[],{"prepared":28,"raw":28,"locations":173},[],{"escaped":28,"rawEcho":175,"locations":176},6,[177,180,183,184,186,188],{"file":152,"line":178,"context":179},143,"raw output",{"file":181,"line":182,"context":179},"views\\settings.php",2,{"file":181,"line":14,"context":179},{"file":181,"line":185,"context":179},12,{"file":181,"line":187,"context":179},25,{"file":181,"line":189,"context":179},28,[],[192,210],{"entryPoint":193,"graph":194,"unsanitizedCount":28,"severity":209},"adminPanel (metricool.php:71)",{"nodes":195,"edges":206},[196,201],{"id":197,"type":198,"label":199,"file":152,"line":200},"n0","source","$_POST['metricool_profile_id']",88,{"id":202,"type":203,"label":204,"file":152,"line":200,"wp_function":205},"n1","sink","update_option() [Settings Manipulation]","update_option",[207],{"from":197,"to":202,"sanitized":208},true,"low",{"entryPoint":211,"graph":212,"unsanitizedCount":28,"severity":209},"\u003Cmetricool> (metricool.php:0)",{"nodes":213,"edges":216},[214,215],{"id":197,"type":198,"label":199,"file":152,"line":200},{"id":202,"type":203,"label":204,"file":152,"line":200,"wp_function":205},[217],{"from":197,"to":202,"sanitized":208},{"summary":219,"deductions":220},"The static analysis of Metricool v1.26 reveals a generally positive security posture in several key areas. The plugin has a small attack surface with no identified AJAX handlers, REST API routes, shortcodes, or cron events that are not protected by authentication or permission checks. Furthermore, it avoids dangerous functions, performs file operations, and makes external HTTP requests, which are all positive signs. SQL queries are also 100% prepared, and there's a single nonce check present.\n\nHowever, a significant concern arises from the complete lack of output escaping. With 6 total outputs and 0% properly escaped, this indicates a high risk of Cross-Site Scripting (XSS) vulnerabilities. The vulnerability history confirms this, with one medium severity CVE historically recorded for XSS, last patched in late 2022. While there are no currently unpatched CVEs or critical\u002Fhigh severity taint flows, the consistent pattern of output escaping issues and past XSS vulnerabilities warrants caution. The plugin's strengths lie in its limited attack surface and secure handling of database queries and external requests, but the unescaped output represents a critical weakness that could be exploited.",[221,224],{"reason":222,"points":223},"Unescaped output found",18,{"reason":225,"points":14},"Medium severity vulnerability history","2026-03-16T17:11:28.756Z",{"wat":228,"direct":233},{"assetPaths":229,"generatorPatterns":230,"scriptPaths":231,"versionParams":232},[],[],[],[],{"cssClasses":234,"htmlComments":235,"htmlAttributes":236,"restEndpoints":237,"jsGlobals":238,"shortcodeOutput":240},[],[],[],[],[239],"beTracker",[]]