[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9FCFchOfOpuiMvnl9jHUuzhF3zhwTHWRR4l4E9PLIJY":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":49,"crawl_stats":38,"alternatives":53,"analysis":151,"fingerprints":267},"statify-widget","Statify Widget","1.4.9","Finn Dohrn","https:\u002F\u002Fprofiles.wordpress.org\u002Fbitnulleins\u002F","\u003Cp>The \u003Cem>Statify Widget\u003C\u002Fem> shows the most popular content from the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fstatify\u002F\" rel=\"ugc\">Statify\u003C\u002Fa> plugin, which collects statistics in compliance with data protection regulations. Fast and clear!\u003C\u002Fp>\n\u003Ch4>What is Statify?\u003C\u002Fh4>\n\u003Cp>Statify is a plugin for visitor statistics with emphasis on privacy, transparency and clarity.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Note\u003C\u002Fstrong>: This widget only works with the main plugin \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fstatify\u002F\" rel=\"ugc\">Statify\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Popular Posts\u003C\u002Fstrong>: Sum up all view from Statify and put it together in a widget\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shortcodes\u003C\u002Fstrong>: The counter for each post\u002Fpage can be put everywhere\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Post Types\u003C\u002Fstrong>: Statify Widget supports custom post types, that can be displayed\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Intelligent summary\u003C\u002Fstrong>: Once there are different paths to a content, the widget adds them together \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Period Selectable\u003C\u002Fstrong>: It is possible to choose an individual daily period for the post popular content\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Widget Template\u003C\u002Fstrong>: You can add individual post\u002Fpage paramater to widget template (see FAQ)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>New: Customize cache time\u003C\u002Fstrong>: Change default 4 minutes cache time to another value! (see FAQ)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Shortcode\u003C\u002Fh4>\n\u003Cp>The shortcode \u003Ccode>[statify-count]\u003C\u002Fcode> can be used to display calls to the current post or page. With the options “prefix” and “suffix” displayed texts can be checked before (prefix) and after (suffix) the calls:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[statify-count prefix=\"Total \" suffix=\" calls.\" days=\"8\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Parameter:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>prefix\u003C\u002Fcode> Sentence before views\u003C\u002Fli>\n\u003Cli>\u003Ccode>suffix\u003C\u002Fcode> Sentence after views\u003C\u002Fli>\n\u003Cli>\u003Ccode>days\u003C\u002Fcode> Inteval for view statistics\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Result: A total of 243 views.\u003C\u002Fp>\n\u003Ch4>Widget Settings\u003C\u002Fh4>\n\u003Cp>The following settings can be made in the widget:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Title\u003C\u002Fli>\n\u003Cli>Content Type (Default: post )\u003C\u002Fli>\n\u003Cli>Category (when content type post is select)\u003C\u002Fli>\n\u003Cli>Amount of entries (default: 5)\u003C\u002Fli>\n\u003Cli>Show views (default: No)\u003C\u002Fli>\n\u003Cli>Custom text (Replace variable for views: %VIEWS%)\u003C\u002Fli>\n\u003Cli>Number of past days (0 days = all statistics)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cp>Friendly questions about the widget I like to answer under \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fstatify-widget\u002F\" rel=\"ugc\">Support\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>If you like my work and want to support \u003Cem>me\u003C\u002Fem>, feel free to \u003Ca href=\"https:\u002F\u002Fde.wordpress.org\u002Fplugins\u002Fstatify-widget\u002F#reviews\" rel=\"nofollow ugc\">rate\u003C\u002Fa> this plugin!\u003C\u002Fp>\n\u003Ch4>Author\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Finn Dohrn\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.bit01.de\" rel=\"nofollow ugc\">Homepage\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Data privacy conform widget for list popular content (pages, posts, custom post types) – based on Statify plugin.",4000,77143,100,5,"2026-01-25T09:39:00.000Z","6.9.4","4.6","5.2.4",[20,21,22,23,24],"analytics","popular-posts","privacy","statistics","widget","http:\u002F\u002Fwww.bit01.de\u002Fblog\u002Fstatify-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstatify-widget.zip",99,1,0,"2025-08-22 00:00:00","2026-03-15T15:16:48.613Z",[33],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48},"CVE-2025-48322","statify-widget-authenticated-contributor-stored-cross-site-scripting","Statify Widget \u003C= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting","The Statify Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=1.4.6","1.4.7","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-10-08 21:13:33",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F42d862ef-523f-43ca-a3fb-ac3fbb537c46?source=api-prod",48,{"slug":50,"display_name":7,"profile_url":8,"plugin_count":28,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":48,"trust_score":51,"computed_at":52},"bitnulleins",87,"2026-04-04T03:34:49.930Z",[54,77,95,115,133],{"slug":55,"name":56,"version":57,"author":58,"author_profile":59,"description":60,"short_description":61,"active_installs":62,"downloaded":63,"rating":64,"num_ratings":65,"last_updated":66,"tested_up_to":16,"requires_at_least":67,"requires_php":68,"tags":69,"homepage":72,"download_link":73,"security_score":74,"vuln_count":75,"unpatched_count":29,"last_vuln_date":76,"fetched_at":31},"burst-statistics","Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative)","3.2.3","Burst Statistics B.V.","https:\u002F\u002Fprofiles.wordpress.org\u002Fburstbv\u002F","\u003Ch4>Finally, analytics that you’ll actually use.\u003C\u002Fh4>\n\u003Cp>Google Analytics is overkill. Other WordPress statistics plugins are cluttered and confusing. You just want to know what’s happening on your site – without a data science degree.\u003C\u002Fp>\n\u003Cp>Burst Statistics gives you a clean, intuitive analytics dashboard focused on the metrics that actually matter. \u003Cstrong>No external accounts. No complex setup. Install, activate, and understand your traffic in seconds.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Trusted by \u003Cstrong>200,000+ WordPress sites\u003C\u002Fstrong>. Built by the experienced team behind UpdraftPlus, WP-Optimize, and All-In-One Security.\u003C\u002Fp>\n\u003Ch4>What our users are saying\u003C\u002Fh4>\n\u003Cblockquote>\n\u003Cp>“Finally, an analytics plugin I can actually explain to clients.”\u003Cbr \u002F>\n  — @anguskeystone on wordpress.org\u003C\u002Fp>\n\u003Cp>“I tried WP Statistics and Independent Analytics, but they’re overloaded and confusing. Burst’s UI is intuitive and focused on what matters to me.”\u003Cbr \u002F>\n  — @vallered on wordpress.org\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>Why Burst Statistics?\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Designed to be actionable\u003C\u002Fstrong>\u003Cbr \u002F>\nOther analytics plugins throw everything at you. Burst shows what matters — visitors, pageviews, referrers, top pages — in a dashboard you’ll actually use. No overload of data. No confusing menus.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Privacy-first by design\u003C\u002Fstrong>\u003Cbr \u002F>\nAll statistics stay on your server. No external tracking. Your data is yours – we never see it without your explicit permission.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Zero setup friction\u003C\u002Fstrong>\u003Cbr \u002F>\nInstall, activate, done. No Google accounts, no tracking codes, no configuration headaches. Start seeing live visitors immediately.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Built for WordPress\u003C\u002Fstrong>\u003Cbr \u002F>\nNot a port from another platform. Designed specifically for WordPress with native performance and seamless integration.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Fast and lightweight\u003C\u002Fstrong>\u003Cbr \u002F>\nOptimized database queries, no bloated scripts (\u003C4kb tracking script), no external dependencies slowing down your pages. Designed to track accurately even when using aggressive server-side caching.\u003C\u002Fp>\n\u003Cp>\u003Ch4>Features\u003C\u002Fh4>\n\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Understand your traffic\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>View table of top performing pages and posts\u003C\u002Fli>\n\u003Cli>Track key metrics (Visitors, Sessions, Pageviews, Bounce Rate)\u003C\u002Fli>\n\u003Cli>Breakdown of visitors by device (Desktop, Tablet, Mobile)\u003C\u002Fli>\n\u003Cli>Filter data by custom date ranges\u003C\u002Fli>\n\u003Cli>Compare traffic over time\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Real-time analytics\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Identify the real-time source for live visitors\u003C\u002Fli>\n\u003Cli>View the specific pages users are visiting now\u003C\u002Fli>\n\u003Cli>See a live count of active users on your site\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>See what content performs\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Top pages and posts ranked by views\u003C\u002Fli>\n\u003Cli>Compare any date range\u003C\u002Fli>\n\u003Cli>Track individual page performance\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Custom conversion tracking\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Track views, clicks and hooks\u003C\u002Fli>\n\u003Cli>Track WooCommerce sales\u003C\u002Fli>\n\u003Cli>Track custom events or hooks\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Privacy without compromise\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>100% self-hosted — all statistics stored locally in your WordPress database\u003C\u002Fli>\n\u003Cli>Cookieless tracking option (no consent banner required in some countries)\u003C\u002Fli>\n\u003Cli>Designed to support GDPR, CCPA, DSGVO, AVG, RGPD, and PECR compliance\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Stay informed\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Weekly or monthly email reports delivered to your inbox\u003C\u002Fli>\n\u003Cli>Compare periods to spot trends\u003C\u002Fli>\n\u003Cli>Get notified when tracking does not work\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>From the creators of UpdraftPlus, WP Optimize and All In One Security\u003C\u002Fh4>\n\u003Cp>Burst Statistics was created by experienced developers who also created:\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fupdraftplus\u002F\" rel=\"ugc\">UpdraftPlus: WP Backup & Migration Plugin\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fall-in-one-wp-security-and-firewall\u002F\" rel=\"ugc\">All-In-One Security (AIOS) – Security and Firewall\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-optimize\u002F\" rel=\"ugc\">WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Who is Burst for?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Bloggers & content creators\u003C\u002Fstrong> — See which posts resonate with your audience\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Small business owners\u003C\u002Fstrong> — Understand your traffic without complexity\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WooCommerce stores\u003C\u002Fstrong> — Track visitor behavior and sales (Burst Pro – Business plan)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Agencies & freelancers\u003C\u002Fstrong> — Manage analytics for your clients (Burst Pro – Agency plan)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy-conscious site owners\u003C\u002Fstrong> — GDPR-compliant stats without consent banners\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Anyone tired of Google Analytics\u003C\u002Fstrong> — Get clarity instead of confusion\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Unlock comprehensive insights into your website’s user behaviour with Burst Pro. Benefit from advanced features designed to improve performance, boost engagement, and drive conversions. \u003Ca href=\"https:\u002F\u002Fburst-statistics.com\u002Fpricing\u002F\" rel=\"nofollow ugc\">Get Burst Pro now.\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Free vs Pro\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Burst Statistics (Free)\u003C\u002Fstrong> includes everything you need to understand your website traffic: visitors, pageviews, referrers, top content, device stats, goal tracking, email reports, and more.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Burst Pro\u003C\u002Fstrong> adds advanced features for businesses and professionals:\u003C\u002Fp>\n\u003Cp>CREATOR PLAN\u003Cbr \u002F>\n* UTM campaign tracking — See which marketing efforts drive results\u003Cbr \u002F>\n* Geographic data — Country and city-level visitor insights\u003Cbr \u002F>\n* Advanced filtering — Segment data by any dimension\u003Cbr \u002F>\n* Data archiving settings — Keep your database lean automatically\u003Cbr \u002F>\n* Priority support — Direct contact with our developers (You’ll speak to actual humans!)\u003C\u002Fp>\n\u003Cp>BUSINESS PLAN\u003Cbr \u002F>\n* Everything in the creator plan +\u003Cbr \u002F>\n* Full sales dashboard — Understand what content brings in the most revenue\u003Cbr \u002F>\n* Revenue attribution — Connect WooCommerce sales to traffic sources\u003C\u002Fp>\n\u003Cp>AGENCY PLAN\u003Cbr \u002F>\n* Everything in the business plan +\u003Cbr \u002F>\n* Reporting — Generate shareable reports\u003C\u002Fp>\n\u003Cp>All Burst Pro plans include \u003Cstrong>priority support\u003C\u002Fstrong>.  You’ll have direct contact with our developers (You’ll speak to actual humans!)\u003C\u002Fp>\n\u003Ch4>Learn More\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fburst-statistics.com\u002Fburst-statistics-vs-google-analytics\u002F\" rel=\"nofollow ugc\">Burst Statistics vs Google Analytics\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fburst-statistics.com\u002Fwhy-is-burst-privacy-friendly\u002F\" rel=\"nofollow ugc\">Privacy & GDPR Compliance\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fburst-statistics.com\u002Fpricing\u002F\" rel=\"nofollow ugc\">Burst Pro Pricing\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Privacy and Data Sharing\u003C\u002Fh4>\n\u003Cp>Burst Statistics includes an \u003Cstrong>optional\u003C\u002Fstrong> data sharing program. It is disabled by default. You can enable it under Burst Statistics \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Settings \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Data Sharing, and you can turn it off again at any time from the same location.\u003Cbr \u002F>\nWhen enabled, the plugin sends a small set of aggregated, anonymized metrics to Burst Statistics’ servers once per month. This includes traffic statistics (visitors, pageviews, bounce rate, session duration), database row counts and query performance timings. No personal data, IP addresses, domain names, or visitor information is ever transmitted. All data is aggregated on your server before it leaves, making it impossible to trace back to your website or any individual user.\u003C\u002Fp>\n\u003Cp>We use this data to:\u003Cbr \u002F>\n* build anonymous industry benchmarks so you can compare your site’s performance against peers;\u003Cbr \u002F>\n* understand which features are most used, so we can prioritize development effectively;\u003Cbr \u002F>\n* know which WordPress and PHP versions are in active use, so we can make informed support decisions;\u003Cbr \u002F>\n* identify slow database queries across real-world installs, so we can improve plugin performance for everyone.\u003C\u002Fp>\n\u003Cp>For the complete list of data fields collected and full details on how the data is used, please read our \u003Ca href=\"https:\u002F\u002Fburst-statistics.com\u002Fhow-we-handle-anonymous-usage-data\u002F\" rel=\"nofollow ugc\">Data Sharing Policy\u003C\u002Fa>.\u003Cbr \u002F>\nThis feature connects to: https:\u002F\u002Fapi.burst-statistics.com\u003C\u002Fp>\n\u003Ch4>Installation\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Go to \u003Cstrong>Plugins \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Add New\u003C\u002Fstrong> in your WordPress dashboard\u003C\u002Fli>\n\u003Cli>Search for \u003Cstrong>Burst\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Click \u003Cstrong>Install Now\u003C\u002Fstrong>, then \u003Cstrong>Activate\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Visit \u003Cstrong>Statistics \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Dashboard\u003C\u002Fstrong> to see your analytics\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>That’s it. No external accounts. No tracking codes to paste. Burst starts collecting statistics immediately.\u003C\u002Fp>\n","Analytics you'll actually use. Privacy-friendly, zero config, and designed to be actionable. Get insights, not just raw data.",200000,7013207,98,173,"2026-03-12T07:52:00.000Z","6.4","8.0",[20,70,22,23,71],"gdpr","stats","https:\u002F\u002Fwww.wordpress.org\u002Fplugins\u002Fburst-statistics","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fburst-statistics.3.2.3.zip",96,3,"2025-06-27 00:00:00",{"slug":78,"name":79,"version":80,"author":81,"author_profile":82,"description":83,"short_description":84,"active_installs":85,"downloaded":86,"rating":74,"num_ratings":87,"last_updated":88,"tested_up_to":16,"requires_at_least":89,"requires_php":90,"tags":91,"homepage":93,"download_link":94,"security_score":13,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"statify","Statify","1.8.5","pluginkollektiv","https:\u002F\u002Fprofiles.wordpress.org\u002Fpluginkollektiv\u002F","\u003Cp>Statify provides a straightforward and compact access to the number of site views. It is privacy-friendly as it uses neither cookies nor a third party.\u003C\u002Fp>\n\u003Cp>An interactive chart is followed by lists of the most common reference sources and target pages. The period of statistics and length of lists can be set directly in the dashboard widget.\u003C\u002Fp>\n\u003Ch3>Data Privacy\u003C\u002Fh3>\n\u003Cp>In direct comparison to statistics services such as \u003Cem>Google Analytics\u003C\u002Fem>, \u003Cem>WordPress.com Stats\u003C\u002Fem> and \u003Cem>Matomo (Piwik)\u003C\u002Fem> \u003Cem>Statify\u003C\u002Fem> doesn’t process and store personal data as e.g. IP addresses – \u003Cem>Statify\u003C\u002Fem> counts site views, not visitors.\u003C\u002Fp>\n\u003Cp>Absolute privacy compliance coupled with transparent procedures: A locally in WordPress created database table consists of only four fields (ID, date, source, target) and can be viewed at any time, cleaned up and cleared by the administrator.\u003C\u002Fp>\n\u003Cp>Due to this tracking approach, Statify is 100% compliant with GDPR and serves as an lightweight alternative to other tracking services.\u003C\u002Fp>\n\u003Ch3>Display of the widget\u003C\u002Fh3>\n\u003Cp>The plugin configuration can be changed directly in the \u003Cem>Statify\u003C\u002Fem> Widget on the dashboard by clicking the \u003Cem>Configure\u003C\u002Fem> link.\u003C\u002Fp>\n\u003Cp>The amount of links shown in the \u003Cem>Statify\u003C\u002Fem> Widget can be set as well as the option to only count views from today. Of course, older entries are not deleted when changing this setting.\u003C\u002Fp>\n\u003Cp>The statistics for the dashboard widget are cached for four minutes.\u003C\u002Fp>\n\u003Ch3>Period of data saving\u003C\u002Fh3>\n\u003Cp>\u003Cem>Statify\u003C\u002Fem> stores the data only for a limited period (default: two weeks), longer intervals can be selected as option in the widget. Data which is older than the selected period is deleted by a daily cron job.\u003C\u002Fp>\n\u003Cp>An increase in the database volume can be expected because all statistic values are collected and managed in the local WordPress database (especially if you increase the period of data saving).\u003C\u002Fp>\n\u003Ch3>JavaScript tracking for caching compatibility\u003C\u002Fh3>\n\u003Cp>For compatibility with caching plugins like \u003Ca href=\"http:\u002F\u002Fcachify.de\" rel=\"nofollow ugc\">Cachify\u003C\u002Fa> \u003Cem>Statify\u003C\u002Fem> offers an optional switchable tracking via JavaScript. This function allows reliable count of cached blog pages.\u003C\u002Fp>\n\u003Cp>For this to work correctly, the active theme has to call \u003Ccode>wp_footer()\u003C\u002Fcode>, typically in a file named \u003Ccode>footer.php\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Ch3>Skip tracking for spam referrers\u003C\u002Fh3>\n\u003Cp>The comment blacklist can be enabled to skip tracking for views with a referrer URL listed in comment blacklist, i. e. which considered as spam.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>If you’ve problems or think you’ve found a bug (e.g. you’re experiencing unexpected behavior), please post at the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fstatify\" rel=\"ugc\">support forums\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Contribute\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Active development of this plugin is handled \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fpluginkollektiv\u002Fstatify\" rel=\"nofollow ugc\">on GitHub\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Pull requests for documented bugs are highly appreciated.\u003C\u002Fli>\n\u003Cli>If you want to help us translate this plugin you can do so \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fstatify\" rel=\"nofollow ugc\">on WordPress Translate\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n","Visitor statistics for WordPress with focus on data protection, transparency and clarity. Perfect as a widget in your WordPress Dashboard.",100000,2377836,50,"2025-12-21T16:02:00.000Z","4.7","5.2",[20,92,22,23,71],"pageviews","https:\u002F\u002Fstatify.pluginkollektiv.org\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstatify.1.8.5.zip",{"slug":96,"name":97,"version":98,"author":99,"author_profile":100,"description":101,"short_description":102,"active_installs":103,"downloaded":104,"rating":13,"num_ratings":105,"last_updated":106,"tested_up_to":16,"requires_at_least":107,"requires_php":108,"tags":109,"homepage":111,"download_link":112,"security_score":74,"vuln_count":113,"unpatched_count":29,"last_vuln_date":114,"fetched_at":31},"koko-analytics","Koko Analytics – Privacy Friendly Statistics for WordPress","2.2.4","Danny van Kooten","https:\u002F\u002Fprofiles.wordpress.org\u002Fdvankooten\u002F","\u003Cp>Koko Analytics provides website analytics and visitor statistics directly inside your WordPress dashboard without relying on external services. It is privacy-friendly, lightweight, open source, and easy to use.\u003C\u002Fp>\n\u003Cp>Fully GDPR, CCPA and PECR compliant by design: no personal data is processed or stored, everything runs on your own server and can be used without cookies.\u003C\u002Fp>\n\u003Cp>You can \u003Ca href=\"https:\u002F\u002Fwww.kokoanalytics.com\u002Fkoko-analytics-dashboard\u002F\" rel=\"nofollow ugc\">view a live demo here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Why Koko Analytics\u003C\u002Fh3>\n\u003Cp>Our goal is to provide you with a simple, lightweight and privacy-friendly alternative to Google Analytics for your WordPress statistics.\u003C\u002Fp>\n\u003Ch4>Privacy Friendly Analytics\u003C\u002Fh4>\n\u003Cp>Koko Analytics is \u003Ca href=\"https:\u002F\u002Fwww.kokoanalytics.com\u002Fprivacy-focused-wordpress-analytics\u002F\" rel=\"nofollow ugc\">privacy friendly analytics\u003C\u002Fa>. No personal data is processed or stored, all measurements are carried out completely anonymously and nothing is ever shared with any third-party service.\u003C\u002Fp>\n\u003Ch4>Lightweight Statistics\u003C\u002Fh4>\n\u003Cp>Koko Analytics is \u003Ca href=\"https:\u002F\u002Fwww.kokoanalytics.com\u002Flightweight-wordpress-analytics\u002F\" rel=\"nofollow ugc\">lightweight analytics\u003C\u002Fa>. It adds less than 1 kilobyte of data to your HTML and is fully compatible with pages served from any kind of cache. WordPress is bypassed entirely for its collection endpoint, making the impact on your site’s performance as close to zero as possible. Fact: there is no faster statistics plugin for WordPress.\u003C\u002Fp>\n\u003Ch4>Simple Analytics Dashboard\u003C\u002Fh4>\n\u003Cp>Koko Analytics is \u003Ca href=\"https:\u002F\u002Fwww.kokoanalytics.com\u002Fsimple-wordpress-analytics\u002F\" rel=\"nofollow ugc\">simple analytics\u003C\u002Fa>. There are no complicated reports to dig through. A single dashboard page shows you all the important metrics.\u003C\u002Fp>\n\u003Ch4>Open Source Analytics\u003C\u002Fh4>\n\u003Cp>Koko Analytics is \u003Ca href=\"https:\u002F\u002Fwww.kokoanalytics.com\u002Fopen-source-wordpress-analytics\u002F\" rel=\"nofollow ugc\">open source analytics\u003C\u002Fa>. The source code is released under the GPL license and freely \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fibericode\u002Fkoko-analytics\" rel=\"nofollow ugc\">available on GitHub\u003C\u002Fa>. Anyone can read it, inspect it and review it.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>A beautiful analytics dashboard built right into WordPress admin.\u003C\u002Fli>\n\u003Cli>View statistics for your most popular posts and pages.\u003C\u002Fli>\n\u003Cli>See referral statistics showing which sites send you traffic.\u003C\u002Fli>\n\u003Cli>Path-based tracking to see analytics for any URL, including archives and search pages.\u003C\u002Fli>\n\u003Cli>Reliably detect returning visitors without the use of cookies.\u003C\u002Fli>\n\u003Cli>Exclude visits from certain WordPress user roles or IP addresses.\u003C\u002Fli>\n\u003Cli>Import historical statistics from Jetpack Stats, Plausible or Burst Statistics.\u003C\u002Fli>\n\u003Cli>Periodically clean-up historical data older than a specified number of months or years.\u003C\u002Fli>\n\u003Cli>A widget, Gutenberg block or shortcode to show a list of your most visited posts or pages.\u003C\u002Fli>\n\u003Cli>A shortcode or Gutenberg block to show the total number of pageviews to a given page.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Premium features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>See what countries your site is visited from with geo-location statistics.\u003C\u002Fli>\n\u003Cli>See what browsers, operating systems or devices your visitors are using.\u003C\u002Fli>\n\u003Cli>Custom event analytics to track outbound link clicks, contact form submissions, and more.\u003C\u002Fli>\n\u003Cli>Stay up-to-date with periodic analytics reports delivered to your email inbox.\u003C\u002Fli>\n\u003Cli>Be notified immediately whenever your site experiences an unusual traffic spike.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You will have access to all of these benefits and more for a small yearly fee.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.kokoanalytics.com\u002Fpricing\u002F\" rel=\"nofollow ugc\">View pricing for Koko Analytics Pro here \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan>\u003C\u002Fa>\u003C\u002Fp>\n","Koko Analytics is a privacy-friendly statistics plugin for WordPress that is an easy to use alternative to Google Analytics.",60000,2043562,222,"2026-03-12T15:04:00.000Z","6.0","7.4",[20,110,22,23,71],"google-analytics","https:\u002F\u002Fwww.kokoanalytics.com\u002F#utm_source=wp-plugin&utm_medium=koko-analytics&utm_campaign=plugins-page","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkoko-analytics.2.2.4.zip",2,"2026-01-20 00:00:00",{"slug":116,"name":117,"version":118,"author":119,"author_profile":120,"description":121,"short_description":122,"active_installs":123,"downloaded":124,"rating":125,"num_ratings":126,"last_updated":127,"tested_up_to":16,"requires_at_least":89,"requires_php":128,"tags":129,"homepage":130,"download_link":131,"security_score":13,"vuln_count":28,"unpatched_count":29,"last_vuln_date":132,"fetched_at":31},"extended-evaluation-for-statify","Statify – Extended Evaluation","2.6.5","Patrick Robrecht","https:\u002F\u002Fprofiles.wordpress.org\u002Fpatrickrobrecht\u002F","\u003Cp>This plugin evaluates the data collected with the privacy-friendly \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fstatify\u002F\" rel=\"ugc\">Statify\u003C\u002Fa> Plugin which is only saving date, referrer and target url for every page view.\u003C\u002Fp>\n\u003Cp>The plugin creates evaluations for the following criteria:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>views per year \u002F month \u002F day\u003C\u002Fli>\n\u003Cli>most popular content\u003C\u002Fli>\n\u003Cli>views per post\u003C\u002Fli>\n\u003Cli>views per referrer\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The results are shown in data tables and diagrams. The evaluation results can be downloaded as CSV files (for an import into LibreOffice Calc or Microsoft Excel).\u003C\u002Fp>\n","This plugin evaluates the data collected with the privacy-friendly Statify Plugin (data tables and diagrams). The evaluation can be downloaded as csv.",20000,142195,92,11,"2026-02-22T19:31:00.000Z","5.6",[20,22,23,71],"https:\u002F\u002Fpatrick-robrecht.de\u002Fwordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fextended-evaluation-for-statify.2.6.5.zip","2023-09-18 00:00:00",{"slug":134,"name":135,"version":136,"author":134,"author_profile":137,"description":138,"short_description":139,"active_installs":13,"downloaded":140,"rating":13,"num_ratings":28,"last_updated":141,"tested_up_to":142,"requires_at_least":143,"requires_php":144,"tags":145,"homepage":147,"download_link":148,"security_score":149,"vuln_count":28,"unpatched_count":29,"last_vuln_date":150,"fetched_at":31},"stetic","Stetic","1.0.13","https:\u002F\u002Fprofiles.wordpress.org\u002Fstetic\u002F","\u003Ch4>Real Time Web Analytics\u003C\u002Fh4>\n\u003Cp>Use the popular Stetic Web Analytics on your WordPress blog.\u003Cbr \u002F>\nJust enter your project token and api key and the Stetic tracking code will be automaticly be added to your site. Now you can watch your stats on the wordpress dashboard and on the Stetic plugin statistics page.\u003C\u002Fp>\n\u003Ch4>Use of 3rd Party and external service\u003C\u002Fh4>\n\u003Cp>You have to be registered with Stetic (URL: https:\u002F\u002Fwww.stetic.com\u002F) to use this plugin. Data is send to and retrieved from Stetic servers.\u003Cbr \u002F>\nFor the terms of use and privacy policies from Stetic, please visit the following URL’s:\u003Cbr \u002F>\nhttps:\u002F\u002Fwww.stetic.com\u002Fterms\u002F\u003Cbr \u002F>\nhttps:\u002F\u002Fwww.stetic.com\u002Fprivacy\u002F\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Ads the Stetic Tracking Code to your blog\u003C\u002Fli>\n\u003Cli>You can choose the Hidden Counter Option\u003C\u002Fli>\n\u003Cli>WordPress Dashboard: Todays performance graph and numbers: Visitors, Page Impressions, Pages\u002FVisit, Time on Site\u003C\u002Fli>\n\u003Cli>Stetic Dashboard page\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Stetic Dashboard page\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Todays performance graph\u003C\u002Fli>\n\u003Cli>Statictic numbers (Visits, PI’s and so on) for Today, Yesterday, This month, Last month, This year and Total\u003C\u002Fli>\n\u003Cli>Performance Graph for last 31 days\u003C\u002Fli>\n\u003Cli>Performance Graph for this year\u003C\u002Fli>\n\u003Cli>Site Stats\u003C\u002Fli>\n\u003Cli>Keyword Stats\u003C\u002Fli>\n\u003Cli>Referrer Stats\u003C\u002Fli>\n\u003Cli>Browser Stats\u003C\u002Fli>\n\u003Cli>OS Stats\u003C\u002Fli>\n\u003Cli>Screen Stats\u003C\u002Fli>\n\u003Cli>Visitor log of the last 25 visitors\u003C\u002Fli>\n\u003C\u002Ful>\n","Web Analytics from Stetic including many features. Displays a widget, a complete analytics dashboard page and adds the tracking code to your site.",5594,"2024-06-28T11:15:00.000Z","6.5.8","3.3","",[20,23,71,146,24],"tracking","https:\u002F\u002Fwww.stetic.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstetic.1.0.13.zip",91,"2021-11-29 00:00:00",{"attackSurface":152,"codeSignals":188,"taintFlows":252,"riskAssessment":253,"analyzedAt":266},{"hooks":153,"ajaxHandlers":176,"restRoutes":177,"shortcodes":178,"cronEvents":187,"entryPointCount":113,"unprotectedCount":29},[154,160,164,168,172],{"type":155,"name":156,"callback":157,"file":158,"line":159},"action","admin_notices","showErrorMessages","statify-widget.php",229,{"type":155,"name":161,"callback":162,"file":158,"line":163},"widgets_init","register_statify_widget",241,{"type":155,"name":165,"callback":166,"file":158,"line":167},"admin_init","requires_statify_plugin",242,{"type":155,"name":169,"callback":170,"file":158,"line":171},"init","statify_widget_load_textdomain",295,{"type":155,"name":173,"callback":174,"file":158,"line":175},"admin_enqueue_scripts","statify_widget_admin_scripts",330,[],[],[179,183],{"tag":180,"callback":181,"file":158,"line":182},"statify-count","Statify_Posts::statify_count_shortcode",38,{"tag":184,"callback":185,"file":158,"line":186},"statify-count-sum","Statify_Posts::statify_count_sum_shortcode",39,[],{"dangerousFunctions":189,"sqlUsage":190,"outputEscaping":192,"fileOperations":29,"externalRequests":29,"nonceChecks":29,"capabilityChecks":29,"bundledLibraries":251},[],{"prepared":75,"raw":29,"locations":191},[],{"escaped":193,"rawEcho":194,"locations":195},34,31,[196,199,201,202,204,206,207,209,211,213,214,216,218,220,221,222,224,225,227,229,230,232,234,235,237,239,241,243,245,247,249],{"file":158,"line":197,"context":198},65,"raw output",{"file":158,"line":200,"context":198},66,{"file":158,"line":200,"context":198},{"file":158,"line":203,"context":198},70,{"file":158,"line":205,"context":198},71,{"file":158,"line":205,"context":198},{"file":158,"line":208,"context":198},76,{"file":158,"line":210,"context":198},82,{"file":158,"line":212,"context":198},83,{"file":158,"line":212,"context":198},{"file":158,"line":215,"context":198},88,{"file":158,"line":217,"context":198},94,{"file":158,"line":219,"context":198},95,{"file":158,"line":219,"context":198},{"file":158,"line":13,"context":198},{"file":158,"line":223,"context":198},101,{"file":158,"line":223,"context":198},{"file":158,"line":226,"context":198},105,{"file":158,"line":228,"context":198},106,{"file":158,"line":228,"context":198},{"file":158,"line":231,"context":198},110,{"file":158,"line":233,"context":198},111,{"file":158,"line":233,"context":198},{"file":158,"line":236,"context":198},151,{"file":158,"line":238,"context":198},156,{"file":158,"line":240,"context":198},171,{"file":158,"line":242,"context":198},181,{"file":158,"line":244,"context":198},194,{"file":158,"line":246,"context":198},216,{"file":158,"line":248,"context":198},250,{"file":158,"line":250,"context":198},275,[],[],{"summary":254,"deductions":255},"The Statify Widget plugin v1.4.9 presents a mixed security posture. On the positive side, the plugin demonstrates good practices regarding SQL query sanitization, with all queries utilizing prepared statements. There are no identified dangerous functions, file operations, external HTTP requests, or bundled libraries, which reduces the potential attack surface. The absence of critical or high-severity taint flows and the fact that all identified entry points have some level of protection are also positive indicators.\n\nHowever, several areas raise concerns. The plugin exhibits a moderate rate of improper output escaping, with only 52% of outputs being properly escaped. This significantly increases the risk of Cross-Site Scripting (XSS) vulnerabilities, especially given that the plugin has a history of a medium-severity XSS vulnerability. The lack of nonce checks and capability checks on its entry points, while not directly flagged as unprotected in the static analysis, is a potential weakness that could be exploited in conjunction with other vulnerabilities or misconfigurations. The vulnerability history, while not indicating currently unpatched critical or high issues, shows a past medium-severity XSS, suggesting a tendency for input sanitization issues.\n\nIn conclusion, while Statify Widget v1.4.9 avoids some common pitfalls like raw SQL and dangerous functions, its output escaping and lack of robust authorization checks on its entry points are significant weaknesses. The past XSS vulnerability further underscores the importance of addressing these issues. Users should exercise caution and consider updating to a version with improved sanitization and authorization checks if available.",[256,259,261,263],{"reason":257,"points":258},"Moderate output escaping issues (52% properly escaped)",6,{"reason":260,"points":14},"No nonce checks on entry points",{"reason":262,"points":14},"No capability checks on entry points",{"reason":264,"points":265},"Past medium severity XSS vulnerability",10,"2026-03-16T18:15:36.463Z",{"wat":268,"direct":277},{"assetPaths":269,"generatorPatterns":272,"scriptPaths":273,"versionParams":274},[270,271],"\u002Fwp-content\u002Fplugins\u002Fstatify-widget\u002Fstatify-widget.css","\u002Fwp-content\u002Fplugins\u002Fstatify-widget\u002Fstatify-widget.js",[],[271],[275,276],"statify-widget\u002Fstatify-widget.css?ver=","statify-widget\u002Fstatify-widget.js?ver=",{"cssClasses":278,"htmlComments":284,"htmlAttributes":292,"restEndpoints":303,"jsGlobals":304,"shortcodeOutput":305},[4,279,280,281,282,283],"statify-widget-list","statify-widget-element","statify-widget-link","post_select","category_select",[285,286,287,288,289,290,291],"Quit","Register StatifyWidget to Wordpress","Generating a from for settings","Override old instance with new instance.","@change 1.4.9","Post Layout","Print the widget",[293,294,295,296,297,298,299,300,301,302],"id=\"statify-widget-amount\"","name=\"statify-widget-amount\"","id=\"statify-widget-post_type\"","name=\"statify-widget-post_type\"","id=\"statify-widget-interval\"","name=\"statify-widget-interval\"","id=\"statify-widget-show_visits\"","name=\"statify-widget-show_visits\"","id=\"statify-widget-suffix\"","name=\"statify-widget-suffix\"",[],[],[306,307,308],"\u003Ca class=\"statify-widget-link\"","\u003Col class=\"statify-widget-list\">","\u003Cli class=\"statify-widget-element\">"]