YooAnalytics – Privacy-Friendly Analytics for WordPress & WooCommerce (Google Analytics Alternative) Security & Risk Analysis

wordpress.org/plugins/yooanalytics

Lightweight, self-hosted, privacy-friendly analytics for WordPress & WooCommerce. Track visitors, page views, real-time users, WooCommerce purchas …

40 active installs v0.8.1 PHP 7.4+ WP 4.9+ Updated Dec 23, 2025
google-analytics-alternativereal-time-analyticswebsite-statisticswoocommerce-analyticswordpress-analytics
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is YooAnalytics – Privacy-Friendly Analytics for WordPress & WooCommerce (Google Analytics Alternative) Safe to Use in 2026?

Generally Safe

Score 100/100

YooAnalytics – Privacy-Friendly Analytics for WordPress & WooCommerce (Google Analytics Alternative) has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The yooanalytics plugin v0.8.1 exhibits a generally good security posture based on the provided static analysis. The absence of known CVEs and a clean vulnerability history are strong indicators of a well-maintained and secure plugin. The code analysis reveals a limited attack surface with no unprotected entry points, which is commendable. Furthermore, the plugin demonstrates good practices in database interaction, utilizing prepared statements for all SQL queries, and avoids file operations and external HTTP requests, mitigating common attack vectors.

Key Concerns

  • No nonce checks on any entry points
  • Only one capability check for all entry points
  • 27% of output not properly escaped
  • Bundled outdated Freemius library v1.0
Vulnerabilities
None known

YooAnalytics – Privacy-Friendly Analytics for WordPress & WooCommerce (Google Analytics Alternative) Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

YooAnalytics – Privacy-Friendly Analytics for WordPress & WooCommerce (Google Analytics Alternative) Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
24 prepared
Unescaped Output
10
23 escaped
Nonce Checks
0
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
1

Bundled Libraries

Freemius1.0

SQL Query Safety

100% prepared24 total queries

Output Escaping

70% escaped33 total outputs
Attack Surface

YooAnalytics – Privacy-Friendly Analytics for WordPress & WooCommerce (Google Analytics Alternative) Attack Surface

Entry Points3
Unprotected0

REST API Routes 3

GET/wp-json/yooanalytics/v1/get-analyticsincludes\rest-api\v1\rest-api.php:24
POST/wp-json/yooanalytics/v1/update-dashboardincludes\rest-api\v1\rest-api.php:30
GET/wp-json/yooanalytics/v1/realtimeincludes\rest-api\v1\rest-api.php:36
WordPress Hooks 7
actionwp_dashboard_setupincludes\admin\class-yoo-dashboard-widget.php:22
actionadmin_enqueue_scriptsincludes\admin\class-yoo-dashboard-widget.php:23
actionadmin_menuincludes\admin\yoo-admin.php:39
actionadmin_print_scriptsincludes\admin\yoo-admin.php:40
actionrest_api_initincludes\rest-api\v1\rest-api.php:15
actionyooanalytics_send_weekly_reportincludes\yoo-email-report.php:35
actionwpincludes\yoo-track.php:40

Scheduled Events 1

yooanalytics_send_weekly_report
Maintenance & Trust

YooAnalytics – Privacy-Friendly Analytics for WordPress & WooCommerce (Google Analytics Alternative) Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 23, 2025
PHP min version7.4
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs40
Developer Profile

YooAnalytics – Privacy-Friendly Analytics for WordPress & WooCommerce (Google Analytics Alternative) Developer Profile

YooAnalytics

1 plugin · 40 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect YooAnalytics – Privacy-Friendly Analytics for WordPress & WooCommerce (Google Analytics Alternative)

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/yooanalytics/assets/js/dashboard-widget.js
Script Paths
/wp-content/plugins/yooanalytics/assets/js/dashboard-widget.js
Version Parameters
yooanalytics/style.css?ver=yooanalytics/script.js?ver=

HTML / DOM Fingerprints

CSS Classes
yoo-w-tilesyoo-w-tileyoo-w-valueyoo-w-subyoo-w-iconyoo-w-trend
Data Attributes
data-yooanalytics-settings
JS Globals
YooAnalyticsWidget
REST Endpoints
/wp-json/yooanalytics/v1/get-analytics/wp-json/yooanalytics/v1/realtime
FAQ

Frequently Asked Questions about YooAnalytics – Privacy-Friendly Analytics for WordPress & WooCommerce (Google Analytics Alternative)