Most Installed Analytics WordPress Plugins
140 indexed plugins
Plugins
140
Active Installs
11m+
Average Score
56
Audited
139
Most Installed
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #101 | StoryChief | 51 | 12 | 55 | 1k+ | Input is not sanitized | ||
| #102 | SV Tracking Manager | 27 | 968 | 129 | 1k+ | Output is not escaped | ||
| #103 | Traffic Monitor | 39 | 6 | 143 | 1k+ | Direct Query | ||
| #104 | Usermaven | 42 | 36 | 77 | 1k+ | Request data is not unslashed | ||
| #105 | VigIA – AI Visibility, Analytics & Control | 100 | 0 | 1k+ | No open findings | |||
| #106 | Parse.ly | 35 | 15 | 44 | 1k+ | Non-prefixed hook name | ||
| #107 | WP Scroll Depth | 66 | 29 | 9 | 1k+ | Output is not escaped | ||
| #108 | Kama Click Counter | Pending | - | - | 900 | Pending scan | ||
| #109 | TWIPLA (Visitor Analytics IO) – Privacy-First Website Stats, Session Recordings, Heatmaps, Polls and Surveys | 38 | 71 | 49 | 900 | Output is not escaped | ||
| #110 | Woopra Analytics Plugin | 34 | 114 | 53 | 900 | Output is not escaped | ||
| #111 | Yandex.Metrika | 42 | 15 | 20 | 900 | Unsafe printing function | ||
| #112 | Amplitude – Analytics, Session Replay, A/B testing and CDP for your website | 96 | 3 | 12 | 800 | Missing Version | ||
| #113 | Analytics Spam Blocker | 37 | 76 | 22 | 800 | Unsafe printing function | ||
| #114 | Hitsteps Web Analytics | 34 | 410 | 322 | 800 | Output is not escaped | ||
| #115 | Mailster Google Analytics | 63 | 26 | 9 | 800 | Output is not escaped | ||
| #116 | ミエルカヒートマップ タグマネージャー | 68 | 9 | 11 | 800 | Input is not validated | ||
| #117 | Siteimprove | 81 | 6 | 23 | 800 | Nonce verification recommended | ||
| #118 | WP Bannerize Pro | 32 | 281 | 216 | 800 | Text Domain Mismatch | ||
| #119 | Datalayer for WooCommerce FREE | 98 | 2 | 5 | 700 | Non-prefixed function | ||
| #120 | Inspectlet – AI-Powered Session Replay, Heatmaps & Analytics | 83 | 13 | 2 | 700 | Text Domain Mismatch | ||
| #121 | Analytics Head | 54 | 34 | 7 | 600 | Output is not escaped | ||
| #122 | Mailster Live | 48 | 22 | 37 | 600 | Missing Translators Comment | ||
| #123 | Track, Analyze & Optimize by WP Tao | 23 | 895 | 756 | 600 | Output is not escaped | ||
| #124 | AFS Analytics | 34 | 194 | 98 | 500 | Text Domain Mismatch | ||
| #125 | AH Google Analytics Code | 88 | 6 | 2 | 500 | Output is not escaped | ||
| #126 | Export Customers Data | 34 | 109 | 49 | 500 | Text Domain Mismatch | ||
| #127 | Include Matomo Tracking, by Jonas Hellmann | 62 | 14 | 4 | 500 | Setting is missing a sanitization callback | ||
| #128 | Integrate GA4 Google Analytics | 63 | 33 | 3 | 500 | Text Domain Mismatch | ||
| #129 | Sopro | 97 | 4 | 4 | 500 | Non-prefixed function | ||
| #130 | AMS Google Webmaster Tools | 76 | 10 | 3 | 400 | Output is not escaped | ||
| #131 | Fathom Analytics Conversions | 59 | 14 | 47 | 400 | Non-prefixed function | ||
| #132 | Lightweight Google Analytics | 64 | 76 | 2 | 400 | Text Domain Mismatch | ||
| #133 | Meow Analytics (Google Analytics) | 34 | 80 | 54 | 400 | Output is not escaped | ||
| #134 | Nimbata Call Tracking | 62 | 13 | 11 | 400 | Non-prefixed function | ||
| #135 | Serviceform Pixel | 40 | 18 | 22 | 400 | Output is not escaped | ||
| #136 | Tiny gtag.js Analytics | 51 | 39 | 0 | 400 | Output is not escaped | ||
| #137 | Universal Google Analytics (GA3 and GA4) | 57 | 28 | 2 | 400 | Output is not escaped | ||
| #138 | utm.codes | 43 | 34 | 33 | 400 | Missing nonce verification | ||
| #139 | TopList.cz | 38 | 138 | 7 | 300 | Output is not escaped | ||
| #140 | PufferSights – AI Crawler Insights | 100 | 0 | 0 | No open findings |
