[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fi1EfmbFNq8cL4z00W9k18qcoXKdYiymsue3Pm-jTvvQ":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":49,"crawl_stats":38,"alternatives":57,"analysis":158,"fingerprints":470},"simple-feed-stats","Simple Statistics for Feeds","20260202","Jeff Starr","https:\u002F\u002Fprofiles.wordpress.org\u002Fspecialk\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fperishablepress.com\u002Fsimple-feed-stats\u002F\" rel=\"nofollow ugc\">Simple Statistics for Feeds\u003C\u002Fa> (SFS) tracks your feeds automatically using a variety of methods, and provides a wealth of tools and options for further configuration and management. Also displays your subscriber count via template tag or shortcode. Fully configurable. Visit the “Simple Statistics for Feeds” settings page for stats, tools, and more info.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>👉 Check out a feed-count demo in the sidebar @ \u003Ca href=\"https:\u002F\u002Fwp-mix.com\u002F\" rel=\"nofollow ugc\">WP-Mix.com\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Cstrong>Fast & Free\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Stop paying 3rd-party fees, track your own stats for free!\u003C\u002Fli>\n\u003Cli>Display a “feed count” badge like the once-awesome Feedburner\u003C\u002Fli>\n\u003Cli>Built with the WP API for optimal performance & security\u003C\u002Fli>\n\u003Cli>Fully compatible with WordPress Multisite\u003C\u002Fli>\n\u003Cli>Regularly updated and “future proof”\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Core Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Daily & Total\u003C\u002Fstrong> – collect daily stats and total stats for each feed\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Beautiful Stats\u003C\u002Fstrong> – view all your feed stats via the plugin settings\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Dashboard Widget\u003C\u002Fstrong> – get a quick overview of your feed statistics\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Feed Count\u003C\u002Fstrong> – display any number for your feed count\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Content\u003C\u002Fstrong> – embellish your feed with graphics and markup\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom CSS\u003C\u002Fstrong> – use your own styles to customize your feed stats\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>More Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Shortcodes & Template Tags to display your feed count anywhere\u003C\u002Fli>\n\u003Cli>Display your daily feed counts for post feeds and comments feeds\u003C\u002Fli>\n\u003Cli>Options to clear cache, reset stats, and restore default settings\u003C\u002Fli>\n\u003Cli>Automatically track custom feeds generated via the WordPress API\u003C\u002Fli>\n\u003Cli>Enable “Strict Mode” reporting for more accurate feed counts\u003C\u002Fli>\n\u003Cli>Track feeds using custom key\u002Fvalue tracking parameters\u003C\u002Fli>\n\u003Cli>Works with or without Gutenberg Block Editor\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Tracking Methods\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Simple Statistics for Feeds provides four ways to track your feeds:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Default Tracking\u003C\u002Fstrong> – tracks feeds directly via URI request\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Tracking\u003C\u002Fstrong> – tracks feeds via embedded post image\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Alternate Tracking\u003C\u002Fstrong> – tracks feeds via embedded feed image\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Open Tracking\u003C\u002Fstrong> – tracks feeds via your own custom image\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Collected Data\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Simple Statistics for Feeds tracks the following data for each feed request:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Feed type\u003C\u002Fli>\n\u003Cli>Tracking type\u003C\u002Fli>\n\u003Cli>Requested URL\u003C\u002Fli>\n\u003Cli>User-agent\u003C\u002Fli>\n\u003Cli>IP address\u003C\u002Fli>\n\u003Cli>Referrer\u003C\u002Fli>\n\u003Cli>Date\u003C\u002Fli>\n\u003Cli>ID\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can view these data at any time by visiting the plugin settings. All feed data are displayed via beautiful, easy-to-use interface. \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsimple-feed-stats\u002Fscreenshots\u002F\" rel=\"ugc\">View screenshots »\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Privacy\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This plugin records the user agent, referrer, and IP address for each feed request. IP collection may be disabled via the plugin settings. All collected data may be deleted at any time via the plugin settings. This plugin does not set any cookies, and it does not connect to any third-party locations.\u003C\u002Fp>\n\u003Cp>Simple Statistics for Feeds (formerly Simple Feed Stats) is developed and maintained by \u003Ca href=\"https:\u002F\u002Fx.com\u002Fperishable\" rel=\"nofollow ugc\">Jeff Starr\u003C\u002Fa>, 15-year \u003Ca href=\"https:\u002F\u002Fplugin-planet.com\u002F\" rel=\"nofollow ugc\">WordPress developer\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fbooks.perishablepress.com\u002F\" rel=\"nofollow ugc\">book author\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Support development\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>I develop and maintain this free plugin with love for the WordPress community. To show support, you can \u003Ca href=\"https:\u002F\u002Fmonzillamedia.com\u002Fdonate.html\" rel=\"nofollow ugc\">make a donation\u003C\u002Fa> or purchase one of my books:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwp-tao.com\u002F\" rel=\"nofollow ugc\">The Tao of WordPress\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdigwp.com\u002F\" rel=\"nofollow ugc\">Digging into WordPress\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fhtaccessbook.com\u002F\" rel=\"nofollow ugc\">.htaccess made easy\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwp-tao.com\u002Fwordpress-themes-book\u002F\" rel=\"nofollow ugc\">WordPress Themes In Depth\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbooks.perishablepress.com\u002Fdownloads\u002Fwizards-collection-sql-recipes-wordpress\u002F\" rel=\"nofollow ugc\">Wizard’s SQL Recipes for WordPress\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>And\u002For purchase one of my premium WordPress plugins:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fplugin-planet.com\u002Fbbq-pro\u002F\" rel=\"nofollow ugc\">BBQ Pro\u003C\u002Fa> – Blazing fast WordPress firewall\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fplugin-planet.com\u002Fblackhole-pro\u002F\" rel=\"nofollow ugc\">Blackhole Pro\u003C\u002Fa> – Automatically block bad bots\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fplugin-planet.com\u002Fbanhammer-pro\u002F\" rel=\"nofollow ugc\">Banhammer Pro\u003C\u002Fa> – Monitor traffic and ban the bad guys\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fplugin-planet.com\u002Fga-google-analytics-pro\u002F\" rel=\"nofollow ugc\">GA Google Analytics Pro\u003C\u002Fa> – Connect WordPress to Google Analytics\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fplugin-planet.com\u002Fhead-meta-pro\u002F\" rel=\"nofollow ugc\">Head Meta Pro\u003C\u002Fa> – Ultimate Meta Tags for WordPress\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fplugin-planet.com\u002Fsimple-ajax-chat-pro\u002F\" rel=\"nofollow ugc\">Simple Ajax Chat Pro\u003C\u002Fa> – Unlimited chat rooms\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fplugin-planet.com\u002Fusp-pro\u002F\" rel=\"nofollow ugc\">USP Pro\u003C\u002Fa> – Unlimited front-end forms\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Links, tweets and likes also appreciated. Thank you! 🙂\u003C\u002Fp>\n","Tracks your feeds and displays your feed count via shortcode.",900,94061,96,58,"2026-02-02T17:18:00.000Z","6.9.4","4.7","5.6.20",[20,21,22,23,24],"feed","rss","statistics","stats","subscribers","https:\u002F\u002Fperishablepress.com\u002Fsimple-feed-stats\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-feed-stats.20260202.zip",99,1,0,"2025-08-22 00:00:00","2026-03-15T15:16:48.613Z",[33],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48},"CVE-2025-57892","simple-statistics-for-feeds-cross-site-request-forgery","Simple Statistics for Feeds \u003C= 20250322 - Cross-Site Request Forgery","The Simple Statistics for Feeds plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 20250322. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a site administrator into performing an action such as clicking on a link.",null,"\u003C=20250322","20250820","medium",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2025-08-26 13:57:11",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F5d3251b8-4759-42c5-8fec-8b7f87e10b1a?source=api-prod",5,{"slug":50,"display_name":7,"profile_url":8,"plugin_count":51,"total_installs":52,"avg_security_score":53,"avg_patch_time_days":54,"trust_score":55,"computed_at":56},"specialk",30,1241610,98,345,78,"2026-04-03T17:56:49.012Z",[58,78,99,116,139],{"slug":59,"name":60,"version":61,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":51,"downloaded":66,"rating":67,"num_ratings":68,"last_updated":69,"tested_up_to":70,"requires_at_least":71,"requires_php":72,"tags":73,"homepage":72,"download_link":76,"security_score":77,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"cartograf-featured-image-in-feed","Cartograf Featured-image in Feed","1.2.1","Jose","https:\u002F\u002Fprofiles.wordpress.org\u002Fversvs\u002F","\u003Cp>This plugin allows the user to show a thumbnail of the featured image of a post along with the content (or excerpt, as configured through WP dashboard) of their posts, when they are read using the feeds that WordPress generate.\u003C\u002Fp>\n\u003Cp>The development and manteniance of this plugin is sponsored by \u003Ca href=\"http:\u002F\u002Fwww.cartograf.net\" rel=\"nofollow ugc\">Cartograf\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Contributors\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Jose Alcántara\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>About Cartograf\u003C\u002Fh3>\n\u003Cp>The development of this plugin has been funded by \u003Ca href=\"http:\u002F\u002Fwww.cartograf.net\" rel=\"nofollow ugc\">Cartograf\u003C\u002Fa>, a consultancy company specialized in free software based in Madrid.\u003C\u002Fp>\n","Includes the featured image of a post at the beginning of the item's content in the WordPress generated feeds. With this plugin, you no longer ne …",2719,100,3,"2023-04-15T15:04:00.000Z","6.2.0","3.5","",[74,20,75,21,24],"featured-image","newsletter","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcartograf-featured-image-in-feed.zip",85,{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":86,"downloaded":87,"rating":53,"num_ratings":88,"last_updated":89,"tested_up_to":16,"requires_at_least":90,"requires_php":91,"tags":92,"homepage":96,"download_link":97,"security_score":13,"vuln_count":68,"unpatched_count":29,"last_vuln_date":98,"fetched_at":31},"burst-statistics","Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative)","3.2.3","Burst Statistics B.V.","https:\u002F\u002Fprofiles.wordpress.org\u002Fburstbv\u002F","\u003Ch4>Finally, analytics that you’ll actually use.\u003C\u002Fh4>\n\u003Cp>Google Analytics is overkill. Other WordPress statistics plugins are cluttered and confusing. You just want to know what’s happening on your site – without a data science degree.\u003C\u002Fp>\n\u003Cp>Burst Statistics gives you a clean, intuitive analytics dashboard focused on the metrics that actually matter. \u003Cstrong>No external accounts. No complex setup. Install, activate, and understand your traffic in seconds.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Trusted by \u003Cstrong>200,000+ WordPress sites\u003C\u002Fstrong>. Built by the experienced team behind UpdraftPlus, WP-Optimize, and All-In-One Security.\u003C\u002Fp>\n\u003Ch4>What our users are saying\u003C\u002Fh4>\n\u003Cblockquote>\n\u003Cp>“Finally, an analytics plugin I can actually explain to clients.”\u003Cbr \u002F>\n  — @anguskeystone on wordpress.org\u003C\u002Fp>\n\u003Cp>“I tried WP Statistics and Independent Analytics, but they’re overloaded and confusing. Burst’s UI is intuitive and focused on what matters to me.”\u003Cbr \u002F>\n  — @vallered on wordpress.org\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>Why Burst Statistics?\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Designed to be actionable\u003C\u002Fstrong>\u003Cbr \u002F>\nOther analytics plugins throw everything at you. Burst shows what matters — visitors, pageviews, referrers, top pages — in a dashboard you’ll actually use. No overload of data. No confusing menus.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Privacy-first by design\u003C\u002Fstrong>\u003Cbr \u002F>\nAll statistics stay on your server. No external tracking. Your data is yours – we never see it without your explicit permission.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Zero setup friction\u003C\u002Fstrong>\u003Cbr \u002F>\nInstall, activate, done. No Google accounts, no tracking codes, no configuration headaches. Start seeing live visitors immediately.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Built for WordPress\u003C\u002Fstrong>\u003Cbr \u002F>\nNot a port from another platform. Designed specifically for WordPress with native performance and seamless integration.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Fast and lightweight\u003C\u002Fstrong>\u003Cbr \u002F>\nOptimized database queries, no bloated scripts (\u003C4kb tracking script), no external dependencies slowing down your pages. Designed to track accurately even when using aggressive server-side caching.\u003C\u002Fp>\n\u003Cp>\u003Ch4>Features\u003C\u002Fh4>\n\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Understand your traffic\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>View table of top performing pages and posts\u003C\u002Fli>\n\u003Cli>Track key metrics (Visitors, Sessions, Pageviews, Bounce Rate)\u003C\u002Fli>\n\u003Cli>Breakdown of visitors by device (Desktop, Tablet, Mobile)\u003C\u002Fli>\n\u003Cli>Filter data by custom date ranges\u003C\u002Fli>\n\u003Cli>Compare traffic over time\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Real-time analytics\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Identify the real-time source for live visitors\u003C\u002Fli>\n\u003Cli>View the specific pages users are visiting now\u003C\u002Fli>\n\u003Cli>See a live count of active users on your site\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>See what content performs\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Top pages and posts ranked by views\u003C\u002Fli>\n\u003Cli>Compare any date range\u003C\u002Fli>\n\u003Cli>Track individual page performance\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Custom conversion tracking\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Track views, clicks and hooks\u003C\u002Fli>\n\u003Cli>Track WooCommerce sales\u003C\u002Fli>\n\u003Cli>Track custom events or hooks\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Privacy without compromise\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>100% self-hosted — all statistics stored locally in your WordPress database\u003C\u002Fli>\n\u003Cli>Cookieless tracking option (no consent banner required in some countries)\u003C\u002Fli>\n\u003Cli>Designed to support GDPR, CCPA, DSGVO, AVG, RGPD, and PECR compliance\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Stay informed\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Weekly or monthly email reports delivered to your inbox\u003C\u002Fli>\n\u003Cli>Compare periods to spot trends\u003C\u002Fli>\n\u003Cli>Get notified when tracking does not work\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>From the creators of UpdraftPlus, WP Optimize and All In One Security\u003C\u002Fh4>\n\u003Cp>Burst Statistics was created by experienced developers who also created:\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fupdraftplus\u002F\" rel=\"ugc\">UpdraftPlus: WP Backup & Migration Plugin\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fall-in-one-wp-security-and-firewall\u002F\" rel=\"ugc\">All-In-One Security (AIOS) – Security and Firewall\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-optimize\u002F\" rel=\"ugc\">WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Who is Burst for?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Bloggers & content creators\u003C\u002Fstrong> — See which posts resonate with your audience\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Small business owners\u003C\u002Fstrong> — Understand your traffic without complexity\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WooCommerce stores\u003C\u002Fstrong> — Track visitor behavior and sales (Burst Pro – Business plan)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Agencies & freelancers\u003C\u002Fstrong> — Manage analytics for your clients (Burst Pro – Agency plan)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy-conscious site owners\u003C\u002Fstrong> — GDPR-compliant stats without consent banners\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Anyone tired of Google Analytics\u003C\u002Fstrong> — Get clarity instead of confusion\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Unlock comprehensive insights into your website’s user behaviour with Burst Pro. Benefit from advanced features designed to improve performance, boost engagement, and drive conversions. \u003Ca href=\"https:\u002F\u002Fburst-statistics.com\u002Fpricing\u002F\" rel=\"nofollow ugc\">Get Burst Pro now.\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Free vs Pro\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Burst Statistics (Free)\u003C\u002Fstrong> includes everything you need to understand your website traffic: visitors, pageviews, referrers, top content, device stats, goal tracking, email reports, and more.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Burst Pro\u003C\u002Fstrong> adds advanced features for businesses and professionals:\u003C\u002Fp>\n\u003Cp>CREATOR PLAN\u003Cbr \u002F>\n* UTM campaign tracking — See which marketing efforts drive results\u003Cbr \u002F>\n* Geographic data — Country and city-level visitor insights\u003Cbr \u002F>\n* Advanced filtering — Segment data by any dimension\u003Cbr \u002F>\n* Data archiving settings — Keep your database lean automatically\u003Cbr \u002F>\n* Priority support — Direct contact with our developers (You’ll speak to actual humans!)\u003C\u002Fp>\n\u003Cp>BUSINESS PLAN\u003Cbr \u002F>\n* Everything in the creator plan +\u003Cbr \u002F>\n* Full sales dashboard — Understand what content brings in the most revenue\u003Cbr \u002F>\n* Revenue attribution — Connect WooCommerce sales to traffic sources\u003C\u002Fp>\n\u003Cp>AGENCY PLAN\u003Cbr \u002F>\n* Everything in the business plan +\u003Cbr \u002F>\n* Reporting — Generate shareable reports\u003C\u002Fp>\n\u003Cp>All Burst Pro plans include \u003Cstrong>priority support\u003C\u002Fstrong>.  You’ll have direct contact with our developers (You’ll speak to actual humans!)\u003C\u002Fp>\n\u003Ch4>Learn More\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fburst-statistics.com\u002Fburst-statistics-vs-google-analytics\u002F\" rel=\"nofollow ugc\">Burst Statistics vs Google Analytics\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fburst-statistics.com\u002Fwhy-is-burst-privacy-friendly\u002F\" rel=\"nofollow ugc\">Privacy & GDPR Compliance\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fburst-statistics.com\u002Fpricing\u002F\" rel=\"nofollow ugc\">Burst Pro Pricing\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Privacy and Data Sharing\u003C\u002Fh4>\n\u003Cp>Burst Statistics includes an \u003Cstrong>optional\u003C\u002Fstrong> data sharing program. It is disabled by default. You can enable it under Burst Statistics \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Settings \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Data Sharing, and you can turn it off again at any time from the same location.\u003Cbr \u002F>\nWhen enabled, the plugin sends a small set of aggregated, anonymized metrics to Burst Statistics’ servers once per month. This includes traffic statistics (visitors, pageviews, bounce rate, session duration), database row counts and query performance timings. No personal data, IP addresses, domain names, or visitor information is ever transmitted. All data is aggregated on your server before it leaves, making it impossible to trace back to your website or any individual user.\u003C\u002Fp>\n\u003Cp>We use this data to:\u003Cbr \u002F>\n* build anonymous industry benchmarks so you can compare your site’s performance against peers;\u003Cbr \u002F>\n* understand which features are most used, so we can prioritize development effectively;\u003Cbr \u002F>\n* know which WordPress and PHP versions are in active use, so we can make informed support decisions;\u003Cbr \u002F>\n* identify slow database queries across real-world installs, so we can improve plugin performance for everyone.\u003C\u002Fp>\n\u003Cp>For the complete list of data fields collected and full details on how the data is used, please read our \u003Ca href=\"https:\u002F\u002Fburst-statistics.com\u002Fhow-we-handle-anonymous-usage-data\u002F\" rel=\"nofollow ugc\">Data Sharing Policy\u003C\u002Fa>.\u003Cbr \u002F>\nThis feature connects to: https:\u002F\u002Fapi.burst-statistics.com\u003C\u002Fp>\n\u003Ch4>Installation\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Go to \u003Cstrong>Plugins \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Add New\u003C\u002Fstrong> in your WordPress dashboard\u003C\u002Fli>\n\u003Cli>Search for \u003Cstrong>Burst\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Click \u003Cstrong>Install Now\u003C\u002Fstrong>, then \u003Cstrong>Activate\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Visit \u003Cstrong>Statistics \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Dashboard\u003C\u002Fstrong> to see your analytics\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>That’s it. No external accounts. No tracking codes to paste. Burst starts collecting statistics immediately.\u003C\u002Fp>\n","Analytics you'll actually use. Privacy-friendly, zero config, and designed to be actionable. Get insights, not just raw data.",200000,7013207,173,"2026-03-12T07:52:00.000Z","6.4","8.0",[93,94,95,22,23],"analytics","gdpr","privacy","https:\u002F\u002Fwww.wordpress.org\u002Fplugins\u002Fburst-statistics","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fburst-statistics.3.2.3.zip","2025-06-27 00:00:00",{"slug":100,"name":101,"version":102,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":107,"downloaded":108,"rating":13,"num_ratings":109,"last_updated":110,"tested_up_to":16,"requires_at_least":17,"requires_php":111,"tags":112,"homepage":114,"download_link":115,"security_score":67,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"statify","Statify","1.8.5","pluginkollektiv","https:\u002F\u002Fprofiles.wordpress.org\u002Fpluginkollektiv\u002F","\u003Cp>Statify provides a straightforward and compact access to the number of site views. It is privacy-friendly as it uses neither cookies nor a third party.\u003C\u002Fp>\n\u003Cp>An interactive chart is followed by lists of the most common reference sources and target pages. The period of statistics and length of lists can be set directly in the dashboard widget.\u003C\u002Fp>\n\u003Ch3>Data Privacy\u003C\u002Fh3>\n\u003Cp>In direct comparison to statistics services such as \u003Cem>Google Analytics\u003C\u002Fem>, \u003Cem>WordPress.com Stats\u003C\u002Fem> and \u003Cem>Matomo (Piwik)\u003C\u002Fem> \u003Cem>Statify\u003C\u002Fem> doesn’t process and store personal data as e.g. IP addresses – \u003Cem>Statify\u003C\u002Fem> counts site views, not visitors.\u003C\u002Fp>\n\u003Cp>Absolute privacy compliance coupled with transparent procedures: A locally in WordPress created database table consists of only four fields (ID, date, source, target) and can be viewed at any time, cleaned up and cleared by the administrator.\u003C\u002Fp>\n\u003Cp>Due to this tracking approach, Statify is 100% compliant with GDPR and serves as an lightweight alternative to other tracking services.\u003C\u002Fp>\n\u003Ch3>Display of the widget\u003C\u002Fh3>\n\u003Cp>The plugin configuration can be changed directly in the \u003Cem>Statify\u003C\u002Fem> Widget on the dashboard by clicking the \u003Cem>Configure\u003C\u002Fem> link.\u003C\u002Fp>\n\u003Cp>The amount of links shown in the \u003Cem>Statify\u003C\u002Fem> Widget can be set as well as the option to only count views from today. Of course, older entries are not deleted when changing this setting.\u003C\u002Fp>\n\u003Cp>The statistics for the dashboard widget are cached for four minutes.\u003C\u002Fp>\n\u003Ch3>Period of data saving\u003C\u002Fh3>\n\u003Cp>\u003Cem>Statify\u003C\u002Fem> stores the data only for a limited period (default: two weeks), longer intervals can be selected as option in the widget. Data which is older than the selected period is deleted by a daily cron job.\u003C\u002Fp>\n\u003Cp>An increase in the database volume can be expected because all statistic values are collected and managed in the local WordPress database (especially if you increase the period of data saving).\u003C\u002Fp>\n\u003Ch3>JavaScript tracking for caching compatibility\u003C\u002Fh3>\n\u003Cp>For compatibility with caching plugins like \u003Ca href=\"http:\u002F\u002Fcachify.de\" rel=\"nofollow ugc\">Cachify\u003C\u002Fa> \u003Cem>Statify\u003C\u002Fem> offers an optional switchable tracking via JavaScript. This function allows reliable count of cached blog pages.\u003C\u002Fp>\n\u003Cp>For this to work correctly, the active theme has to call \u003Ccode>wp_footer()\u003C\u002Fcode>, typically in a file named \u003Ccode>footer.php\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Ch3>Skip tracking for spam referrers\u003C\u002Fh3>\n\u003Cp>The comment blacklist can be enabled to skip tracking for views with a referrer URL listed in comment blacklist, i. e. which considered as spam.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>If you’ve problems or think you’ve found a bug (e.g. you’re experiencing unexpected behavior), please post at the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fstatify\" rel=\"ugc\">support forums\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Contribute\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Active development of this plugin is handled \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fpluginkollektiv\u002Fstatify\" rel=\"nofollow ugc\">on GitHub\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Pull requests for documented bugs are highly appreciated.\u003C\u002Fli>\n\u003Cli>If you want to help us translate this plugin you can do so \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fstatify\" rel=\"nofollow ugc\">on WordPress Translate\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n","Visitor statistics for WordPress with focus on data protection, transparency and clarity. Perfect as a widget in your WordPress Dashboard.",100000,2377836,50,"2025-12-21T16:02:00.000Z","5.2",[93,113,95,22,23],"pageviews","https:\u002F\u002Fstatify.pluginkollektiv.org\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstatify.1.8.5.zip",{"slug":117,"name":118,"version":119,"author":120,"author_profile":121,"description":122,"short_description":123,"active_installs":124,"downloaded":125,"rating":126,"num_ratings":127,"last_updated":128,"tested_up_to":129,"requires_at_least":130,"requires_php":72,"tags":131,"homepage":135,"download_link":136,"security_score":53,"vuln_count":137,"unpatched_count":29,"last_vuln_date":138,"fetched_at":31},"official-statcounter-plugin-for-wordpress","StatCounter – Free Real Time Visitor Stats","2.1.1","StatCounter","https:\u002F\u002Fprofiles.wordpress.org\u002Fstatcounter\u002F","\u003Cp>The Official StatCounter WordPress Plugin brings you all the powerful StatCounter features to your wordpress blog.\u003C\u002Fp>\n\u003Cp>Including but not limited to the following:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#invisible-counter\" rel=\"nofollow ugc\">Invisible Counter Option\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#configurable-counter\" rel=\"nofollow ugc\">Configurable Counter\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#configurable-summary-stats\" rel=\"nofollow ugc\">Configurable Summary Stats\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#magnify-user\" rel=\"nofollow ugc\">Magnify User\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#drill-down\" rel=\"nofollow ugc\">Drill Down\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#popular-pages\" rel=\"nofollow ugc\">Popular Pages\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#entry-pages\" rel=\"nofollow ugc\">Entry Pages\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#exit-pages\" rel=\"nofollow ugc\">Exit Pages\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#came-from\" rel=\"nofollow ugc\">Came From\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#keyword-analysis\" rel=\"nofollow ugc\">Keyword Analysis\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#recent-keyword-activity\" rel=\"nofollow ugc\">Recent Keyword Activity\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#search-engine-wars\" rel=\"nofollow ugc\">Search Engine Wars\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#visitor-paths\" rel=\"nofollow ugc\">Visitor Paths\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#visit-length\" rel=\"nofollow ugc\">Visit Length\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#returning-visits\" rel=\"nofollow ugc\">Returning Visits\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#recent-pageload-activity\" rel=\"nofollow ugc\">Recent Pageload Activity\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#recent-visitor-activity\" rel=\"nofollow ugc\">Recent Visitor Activity\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#country-state-city-stats\" rel=\"nofollow ugc\">Country\u002FState\u002FCity Stats\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#visitor-map\" rel=\"nofollow ugc\">Recent Visitor Google Map\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#isp-stats\" rel=\"nofollow ugc\">ISP Stats\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#browser-stats\" rel=\"nofollow ugc\">Browser Stats\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#os-stats\" rel=\"nofollow ugc\">O.S. Stats\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#resolution-stats\" rel=\"nofollow ugc\">Resolution Stats\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#javascript-stats\" rel=\"nofollow ugc\">JavaScript Stats\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#email-reports\" rel=\"nofollow ugc\">Email Reports\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#multiple-site-management\" rel=\"nofollow ugc\">Multiple Site Management\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#user-access-management\" rel=\"nofollow ugc\">User Access Management\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#public-stats\" rel=\"nofollow ugc\">Public Stats\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fstatcounter.com\u002Ffeatures\u002F#blocking-cookie\" rel=\"nofollow ugc\">Blocking Cookie\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","StatCounter.com powered real-time detailed stats about the visitors to your blog.",70000,1981970,80,47,"2025-12-02T12:40:00.000Z","6.8.5","2.0.2",[132,133,22,23,134],"counter","hit","web","http:\u002F\u002Fstatcounter.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fofficial-statcounter-plugin-for-wordpress.2.1.1.zip",2,"2026-02-18 00:00:00",{"slug":140,"name":141,"version":142,"author":143,"author_profile":144,"description":145,"short_description":146,"active_installs":147,"downloaded":148,"rating":67,"num_ratings":149,"last_updated":150,"tested_up_to":16,"requires_at_least":151,"requires_php":152,"tags":153,"homepage":155,"download_link":156,"security_score":13,"vuln_count":137,"unpatched_count":29,"last_vuln_date":157,"fetched_at":31},"koko-analytics","Koko Analytics – Privacy Friendly Statistics for WordPress","2.2.4","Danny van Kooten","https:\u002F\u002Fprofiles.wordpress.org\u002Fdvankooten\u002F","\u003Cp>Koko Analytics provides website analytics and visitor statistics directly inside your WordPress dashboard without relying on external services. It is privacy-friendly, lightweight, open source, and easy to use.\u003C\u002Fp>\n\u003Cp>Fully GDPR, CCPA and PECR compliant by design: no personal data is processed or stored, everything runs on your own server and can be used without cookies.\u003C\u002Fp>\n\u003Cp>You can \u003Ca href=\"https:\u002F\u002Fwww.kokoanalytics.com\u002Fkoko-analytics-dashboard\u002F\" rel=\"nofollow ugc\">view a live demo here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Why Koko Analytics\u003C\u002Fh3>\n\u003Cp>Our goal is to provide you with a simple, lightweight and privacy-friendly alternative to Google Analytics for your WordPress statistics.\u003C\u002Fp>\n\u003Ch4>Privacy Friendly Analytics\u003C\u002Fh4>\n\u003Cp>Koko Analytics is \u003Ca href=\"https:\u002F\u002Fwww.kokoanalytics.com\u002Fprivacy-focused-wordpress-analytics\u002F\" rel=\"nofollow ugc\">privacy friendly analytics\u003C\u002Fa>. No personal data is processed or stored, all measurements are carried out completely anonymously and nothing is ever shared with any third-party service.\u003C\u002Fp>\n\u003Ch4>Lightweight Statistics\u003C\u002Fh4>\n\u003Cp>Koko Analytics is \u003Ca href=\"https:\u002F\u002Fwww.kokoanalytics.com\u002Flightweight-wordpress-analytics\u002F\" rel=\"nofollow ugc\">lightweight analytics\u003C\u002Fa>. It adds less than 1 kilobyte of data to your HTML and is fully compatible with pages served from any kind of cache. WordPress is bypassed entirely for its collection endpoint, making the impact on your site’s performance as close to zero as possible. Fact: there is no faster statistics plugin for WordPress.\u003C\u002Fp>\n\u003Ch4>Simple Analytics Dashboard\u003C\u002Fh4>\n\u003Cp>Koko Analytics is \u003Ca href=\"https:\u002F\u002Fwww.kokoanalytics.com\u002Fsimple-wordpress-analytics\u002F\" rel=\"nofollow ugc\">simple analytics\u003C\u002Fa>. There are no complicated reports to dig through. A single dashboard page shows you all the important metrics.\u003C\u002Fp>\n\u003Ch4>Open Source Analytics\u003C\u002Fh4>\n\u003Cp>Koko Analytics is \u003Ca href=\"https:\u002F\u002Fwww.kokoanalytics.com\u002Fopen-source-wordpress-analytics\u002F\" rel=\"nofollow ugc\">open source analytics\u003C\u002Fa>. The source code is released under the GPL license and freely \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fibericode\u002Fkoko-analytics\" rel=\"nofollow ugc\">available on GitHub\u003C\u002Fa>. Anyone can read it, inspect it and review it.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>A beautiful analytics dashboard built right into WordPress admin.\u003C\u002Fli>\n\u003Cli>View statistics for your most popular posts and pages.\u003C\u002Fli>\n\u003Cli>See referral statistics showing which sites send you traffic.\u003C\u002Fli>\n\u003Cli>Path-based tracking to see analytics for any URL, including archives and search pages.\u003C\u002Fli>\n\u003Cli>Reliably detect returning visitors without the use of cookies.\u003C\u002Fli>\n\u003Cli>Exclude visits from certain WordPress user roles or IP addresses.\u003C\u002Fli>\n\u003Cli>Import historical statistics from Jetpack Stats, Plausible or Burst Statistics.\u003C\u002Fli>\n\u003Cli>Periodically clean-up historical data older than a specified number of months or years.\u003C\u002Fli>\n\u003Cli>A widget, Gutenberg block or shortcode to show a list of your most visited posts or pages.\u003C\u002Fli>\n\u003Cli>A shortcode or Gutenberg block to show the total number of pageviews to a given page.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Premium features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>See what countries your site is visited from with geo-location statistics.\u003C\u002Fli>\n\u003Cli>See what browsers, operating systems or devices your visitors are using.\u003C\u002Fli>\n\u003Cli>Custom event analytics to track outbound link clicks, contact form submissions, and more.\u003C\u002Fli>\n\u003Cli>Stay up-to-date with periodic analytics reports delivered to your email inbox.\u003C\u002Fli>\n\u003Cli>Be notified immediately whenever your site experiences an unusual traffic spike.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You will have access to all of these benefits and more for a small yearly fee.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.kokoanalytics.com\u002Fpricing\u002F\" rel=\"nofollow ugc\">View pricing for Koko Analytics Pro here \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan>\u003C\u002Fa>\u003C\u002Fp>\n","Koko Analytics is a privacy-friendly statistics plugin for WordPress that is an easy to use alternative to Google Analytics.",60000,2043562,222,"2026-03-12T15:04:00.000Z","6.0","7.4",[93,154,95,22,23],"google-analytics","https:\u002F\u002Fwww.kokoanalytics.com\u002F#utm_source=wp-plugin&utm_medium=koko-analytics&utm_campaign=plugins-page","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkoko-analytics.2.2.4.zip","2026-01-20 00:00:00",{"attackSurface":159,"codeSignals":292,"taintFlows":403,"riskAssessment":455,"analyzedAt":469},{"hooks":160,"ajaxHandlers":268,"restRoutes":269,"shortcodes":270,"cronEvents":287,"entryPointCount":48,"unprotectedCount":29},[161,167,171,175,180,184,188,192,196,201,205,208,212,215,219,222,225,229,233,236,239,243,247,251,255,259,262,265],{"type":162,"name":163,"callback":164,"file":165,"line":166},"action","init","sfs_i18n_init","sfs-admin.php",11,{"type":162,"name":168,"callback":169,"file":165,"line":170},"admin_init","sfs_init",21,{"type":162,"name":172,"callback":173,"file":165,"line":174},"admin_menu","sfs_add_options_page",31,{"type":176,"name":177,"callback":178,"priority":179,"file":165,"line":27},"filter","admin_footer_text","sfs_admin_footer_text",10,{"type":162,"name":181,"callback":182,"priority":179,"file":165,"line":183},"wpmu_new_blog","sfs_on_create_blog",219,{"type":176,"name":185,"callback":186,"file":165,"line":187},"wpmu_drop_tables","sfs_on_delete_blog",230,{"type":162,"name":189,"callback":190,"file":165,"line":191},"current_screen","sfs_version_control",266,{"type":162,"name":193,"callback":194,"file":165,"line":195},"wp_dashboard_setup","add_custom_dashboard_widget",431,{"type":176,"name":197,"callback":198,"priority":179,"file":199,"line":200},"plugin_action_links","sfs_plugin_action_links","simple-feed-stats.php",51,{"type":176,"name":202,"callback":203,"priority":179,"file":199,"line":204},"plugin_row_meta","add_sfs_links",52,{"type":162,"name":168,"callback":206,"file":199,"line":207},"sfs_require_wp_version",53,{"type":176,"name":209,"callback":210,"priority":179,"file":199,"line":211},"the_content","do_shortcode",60,{"type":176,"name":213,"callback":210,"priority":179,"file":199,"line":214},"widget_text",61,{"type":162,"name":216,"callback":217,"file":199,"line":218},"wp_head","sfs_include_badge_styles",122,{"type":176,"name":209,"callback":220,"file":199,"line":221},"sfs_feed_content",147,{"type":176,"name":223,"callback":220,"file":199,"line":224},"the_excerpt",148,{"type":162,"name":226,"callback":227,"file":199,"line":228},"wp","simple_feed_stats",340,{"type":176,"name":230,"callback":231,"file":199,"line":232},"the_excerpt_rss","sfs_feed_tracking",404,{"type":176,"name":234,"callback":231,"file":199,"line":235},"comment_text_rss",405,{"type":176,"name":237,"callback":231,"file":199,"line":238},"comment_text",406,{"type":162,"name":240,"callback":241,"file":199,"line":242},"rdf_header","sfs_alt_tracking_rdf",444,{"type":162,"name":244,"callback":245,"file":199,"line":246},"rss2_head","sfs_alt_tracking_rss",478,{"type":162,"name":248,"callback":249,"file":199,"line":250},"atom_head","sfs_alt_tracking_atom",506,{"type":162,"name":252,"callback":253,"file":199,"line":254},"commentsrss2_head","sfs_alt_tracking_comments_rss",540,{"type":162,"name":256,"callback":257,"file":199,"line":258},"comments_atom_head","sfs_alt_tracking_comments_atom",568,{"type":162,"name":168,"callback":260,"file":199,"line":261},"sfs_clear_cache",682,{"type":162,"name":168,"callback":263,"file":199,"line":264},"sfs_reset_stats",728,{"type":162,"name":266,"callback":266,"file":199,"line":267},"sfs_create_transients",949,[],[],[271,275,278,281,284],{"tag":272,"callback":272,"file":273,"line":274},"sfs_subscriber_count","sfs-shortcodes.php",25,{"tag":276,"callback":276,"file":273,"line":277},"sfs_count_badge",55,{"tag":279,"callback":279,"file":273,"line":280},"sfs_count_simple",109,{"tag":282,"callback":282,"file":273,"line":283},"sfs_rss2_count",125,{"tag":285,"callback":285,"file":273,"line":286},"sfs_comments_count",141,[288,290],{"hook":266,"callback":266,"file":199,"line":289},808,{"hook":266,"callback":266,"file":199,"line":291},822,{"dangerousFunctions":293,"sqlUsage":294,"outputEscaping":321,"fileOperations":29,"externalRequests":29,"nonceChecks":68,"capabilityChecks":401,"bundledLibraries":402},[],{"prepared":295,"raw":179,"locations":296},14,[297,300,303,306,309,311,313,315,317,320],{"file":165,"line":298,"context":299},159,"$wpdb->get_var() with variable interpolation",{"file":165,"line":301,"context":302},190,"$wpdb->get_col() with variable interpolation",{"file":165,"line":304,"context":305},453,"$wpdb->get_row() with variable interpolation",{"file":199,"line":307,"context":308},710,"$wpdb->query() with variable interpolation",{"file":199,"line":310,"context":308},756,{"file":199,"line":312,"context":302},798,{"file":199,"line":314,"context":302},840,{"file":199,"line":316,"context":299},904,{"file":318,"line":319,"context":302},"uninstall.php",15,{"file":318,"line":27,"context":308},{"escaped":280,"rawEcho":322,"locations":323},39,[324,327,329,331,333,335,337,339,341,343,345,347,349,351,353,355,357,359,361,363,365,367,369,371,373,375,377,379,381,383,385,387,389,391,393,395,396,398,400],{"file":165,"line":325,"context":326},414,"raw output",{"file":165,"line":328,"context":326},415,{"file":165,"line":330,"context":326},416,{"file":165,"line":332,"context":326},417,{"file":165,"line":334,"context":326},494,{"file":165,"line":336,"context":326},579,{"file":165,"line":338,"context":326},584,{"file":165,"line":340,"context":326},599,{"file":165,"line":342,"context":326},739,{"file":165,"line":344,"context":326},761,{"file":165,"line":346,"context":326},766,{"file":165,"line":348,"context":326},770,{"file":165,"line":350,"context":326},788,{"file":165,"line":352,"context":326},831,{"file":165,"line":354,"context":326},832,{"file":165,"line":356,"context":326},846,{"file":165,"line":358,"context":326},852,{"file":165,"line":360,"context":326},1010,{"file":165,"line":362,"context":326},1017,{"file":165,"line":364,"context":326},1093,{"file":165,"line":366,"context":326},1095,{"file":165,"line":368,"context":326},1098,{"file":273,"line":370,"context":326},152,{"file":273,"line":372,"context":326},158,{"file":273,"line":374,"context":326},171,{"file":273,"line":376,"context":326},180,{"file":273,"line":378,"context":326},193,{"file":199,"line":380,"context":326},116,{"file":199,"line":382,"context":326},434,{"file":199,"line":384,"context":326},436,{"file":199,"line":386,"context":326},469,{"file":199,"line":388,"context":326},501,{"file":199,"line":390,"context":326},531,{"file":199,"line":392,"context":326},563,{"file":394,"line":218,"context":326},"support-panel.php",{"file":394,"line":283,"context":326},{"file":394,"line":397,"context":326},130,{"file":394,"line":399,"context":326},132,{"file":394,"line":399,"context":326},4,[],[404,439],{"entryPoint":405,"graph":406,"unsanitizedCount":29,"severity":438},"\u003Csfs-admin> (sfs-admin.php:0)",{"nodes":407,"edges":433},[408,413,419,422,427,431],{"id":409,"type":410,"label":411,"file":165,"line":412},"n0","source","$_GET (x2)",445,{"id":414,"type":415,"label":416,"file":165,"line":417,"wp_function":418},"n1","sink","get_results() [SQLi]",467,"get_results",{"id":420,"type":410,"label":411,"file":165,"line":421},"n2",463,{"id":423,"type":415,"label":424,"file":165,"line":425,"wp_function":426},"n3","echo() [XSS]",738,"echo",{"id":428,"type":410,"label":429,"file":165,"line":430},"n4","$_SERVER",1070,{"id":432,"type":415,"label":424,"file":165,"line":368,"wp_function":426},"n5",[434,436,437],{"from":409,"to":414,"sanitized":435},true,{"from":420,"to":423,"sanitized":435},{"from":428,"to":432,"sanitized":435},"low",{"entryPoint":440,"graph":441,"unsanitizedCount":68,"severity":454},"sfs_render_form (sfs-admin.php:436)",{"nodes":442,"edges":449},[443,444,445,446,447,448],{"id":409,"type":410,"label":411,"file":165,"line":412},{"id":414,"type":415,"label":416,"file":165,"line":417,"wp_function":418},{"id":420,"type":410,"label":411,"file":165,"line":421},{"id":423,"type":415,"label":424,"file":165,"line":425,"wp_function":426},{"id":428,"type":410,"label":429,"file":165,"line":430},{"id":432,"type":415,"label":424,"file":165,"line":368,"wp_function":426},[450,452,453],{"from":409,"to":414,"sanitized":451},false,{"from":420,"to":423,"sanitized":435},{"from":428,"to":432,"sanitized":451},"high",{"summary":456,"deductions":457},"The \"simple-feed-stats\" plugin v20260202 exhibits a mixed security posture. On the positive side, it demonstrates good practices by having no unauthenticated AJAX handlers or REST API routes, and it includes a reasonable number of nonce and capability checks. The absence of file operations and external HTTP requests further reduces its attack surface. However, there are areas of concern, particularly in its handling of SQL queries and output escaping. While the majority of SQL queries use prepared statements, a significant percentage do not, posing a potential risk for SQL injection vulnerabilities. Similarly, the 74% proper output escaping rate means that a notable portion of outputs are not adequately sanitized, potentially leading to Cross-Site Scripting (XSS) vulnerabilities.\n\nThe taint analysis reveals one flow with an unsanitized path, which is flagged as high severity. This is a critical indicator of a potential vulnerability that could be exploited if an attacker can control input leading to this unsanitized path. The vulnerability history shows one medium severity CVE for Cross-Site Request Forgery (CSRF) in the past, which, while currently patched, suggests a pattern of past security weaknesses that require ongoing vigilance. The plugin is currently free of unpatched CVEs, which is a positive sign, but the past medium severity CSRF vulnerability combined with the high-severity taint flow warrants careful consideration.\n\nIn conclusion, while \"simple-feed-stats\" has strengths in its limited external interactions and its efforts to secure entry points, the presence of unsanitized paths in taint analysis and a history of past vulnerabilities, coupled with less than ideal SQL and output sanitization, indicate that this plugin is not entirely without risk. Continued monitoring and development focusing on hardening the sanitization of SQL queries and all output will be crucial for maintaining a secure environment.",[458,461,464,466],{"reason":459,"points":460},"High severity taint flow with unsanitized path",12,{"reason":462,"points":463},"SQL queries not using prepared statements (42%)",8,{"reason":465,"points":48},"Output escaping not properly handled (26%)",{"reason":467,"points":468},"Past medium severity CVE (CSRF)",7,"2026-03-16T19:12:40.107Z",{"wat":471,"direct":477},{"assetPaths":472,"generatorPatterns":474,"scriptPaths":475,"versionParams":476},[473],"\u002Fwp-content\u002Fplugins\u002Fsimple-feed-stats\u002F",[],[],[],{"cssClasses":478,"htmlComments":481,"htmlAttributes":482,"restEndpoints":485,"jsGlobals":486,"shortcodeOutput":488},[479,480],"sfs-widget","sfs-feed-stats",[],[483,484],"data-sfs-feed","data-sfs-id",[],[487],"sfs_feed_data",[489,490],"[simple_feed_stats","[sfs_stats"]