MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)

The best free Google Analytics plugin for WordPress. See how visitors find and use your website so you can grow your business with powerful analytics.

v10.2.2chriscct7Updated Added 2m+ installs90% rating64% support resolved
25
Score
116
Errors
441
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance98
Maintainability0

Top Issues by Category

maintainability308
security212
i18n26

Issues Details

557 issues found in latest scan

WARNING123
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

WARNING84
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$background_color".

WARNING41
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_POST['_monsterinsights_sitenote_note']

ERROR41
badly_named_files

File and folder names must not contain spaces or special characters.

WARNING37
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING35
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERROR35
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNING24
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_POST['date_range'] not unslashed before sanitization. Use wp_unslash() or similar

WARNING23
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "admin_head".

WARNING21
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $sql used in $wpdb->get_results()\n$sql assigned unsafely at line 327.

ERROR20
WordPress.WP.I18n.TextDomainMismatch

Mismatched text domain. Expected 'google-analytics-for-wordpress' but got 'google-analytics-premium'.

WARNING13
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WP_ADMIN".

WARNING8
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "current_datetime".

WARNING6
Internal.NoCodeFound

No PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.

ERROR6
WordPress.WP.I18n.MissingTranslatorsComment

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNING5
WordPress.DB.DirectDatabaseQuery.SchemaChange

Attempting a database schema change is discouraged.

WARNING4
WordPress.DB.SlowDBQuery.slow_db_query_meta_key

Detected usage of meta_key, possible slow query.

ERROR3
WordPress.DB.PreparedSQLPlaceholders.LikeWildcardsInQuery

SQL wildcards for a LIKE query should be passed in through a replacement parameter. Found: LIKE '_transient_monsterinsights_report_%%'.

WARNING3
WordPress.DB.SlowDBQuery.slow_db_query_meta_value

Detected usage of meta_value, possible slow query.

ERROR3
WordPress.WP.AlternativeFunctions.unlink_unlink

unlink() is discouraged. Use wp_delete_file() to delete a file.

WARNING3
trademarked_term

The plugin name includes a restricted term. Your chosen plugin name - "Google Analytics for WordPress by MonsterInsights" - contains the restricted term "google" and cannot be used to begin your plugin name. We disallow the use of certain terms in ways that are abused, or potentially infringe on and/or are misleading with regards to trademarks. You may use the term "google" elsewhere in your plugin name, such as "... for google".

ERROR2
PluginCheck.CodeAnalysis.WriteFile.PluginDirectoryWrite

Plugin folders are deleted when upgraded. Do not save data to the plugin folder using unzip_file(). Detected usage of constant WP_CONTENT_DIR. Use wp_upload_dir() to get the uploads directory path or save to the database instead.

WARNING2
Squiz.PHP.DiscouragedFunctions.Discouraged

The use of function set_time_limit() is discouraged

WARNING2
WordPress.WP.EnqueuedResourceParameters.MissingVersion

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

ERROR2
WordPress.WP.EnqueuedResources.NonEnqueuedStylesheet

Stylesheets must be registered/enqueued via wp_enqueue_style()

Latest Snapshot

Findings

557

Errors

116

Warnings

441

Score History

First score snapshot

First scan completed

v10.2.2 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

v10.2.2

25

Latest

Findings
557
Errors
116
Warnings
441
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins