Analytics WordPress Plugins with Most Issues
140 indexed plugins
Plugins
140
Active Installs
11m+
Average Score
56
Audited
139
Most Issues
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #51 | Yandex Metrica | 39 | 92 | 46 | 20k+ | Output is not escaped | ||
| #52 | Meow Analytics (Google Analytics) | 34 | 80 | 54 | 400 | Output is not escaped | ||
| #53 | WP Views Counter | 35 | 81 | 42 | 2k+ | Output is not escaped | ||
| #54 | Statify – Extended Evaluation | 95 | 2 | 119 | 20k+ | Non-prefixed global variable | ||
| #55 | TWIPLA (Visitor Analytics IO) – Privacy-First Website Stats, Session Recordings, Heatmaps, Polls and Surveys | 38 | 71 | 49 | 900 | Output is not escaped | ||
| #56 | Klaviyo | 79 | 27 | 87 | 100k+ | Non-prefixed function | ||
| #57 | Usermaven | 42 | 36 | 77 | 1k+ | Request data is not unslashed | ||
| #58 | heatmap for WordPress – Realtime analytics | 40 | 94 | 15 | 1k+ | Non Singular String Literal Domain | ||
| #59 | NewStatPress | 94 | 95 | 12 | 8k+ | wp function not compatible with requires wp | ||
| #60 | Simple Blog Stats | 53 | 25 | 76 | 4k+ | Non-prefixed function | ||
| #61 | Analytics Spam Blocker | 37 | 76 | 22 | 800 | Unsafe printing function | ||
| #62 | Statify | 91 | 2 | 91 | 100k+ | Non-prefixed global variable | ||
| #63 | Lightweight Google Analytics | 64 | 76 | 2 | 400 | Text Domain Mismatch | ||
| #64 | GA Google Analytics – Connect Google Analytics to WordPress | 42 | 46 | 30 | 400k+ | Output is not escaped | ||
| #65 | Website Pop-up Builder by BDOW! (formerly Sumo): Pop-ups + forms for email opt-ins and lead generation | 37 | 42 | 33 | 10k+ | Output is not escaped | ||
| #66 | ShinyStat Analytics | 43 | 65 | 8 | 1k+ | Output is not escaped | ||
| #67 | Skroutz Analytics for WooCommerce | 53 | 57 | 15 | 1k+ | Text Domain Mismatch | ||
| #68 | StoryChief | 51 | 12 | 55 | 1k+ | Input is not sanitized | ||
| #69 | utm.codes | 43 | 34 | 33 | 400 | Missing nonce verification | ||
| #70 | Statify Widget | 40 | 52 | 13 | 4k+ | Output is not escaped | ||
| #71 | Analytics Germanized for Google Analytics (GDPR / DSGVO) | 40 | 49 | 14 | 7k+ | Output is not escaped | ||
| #72 | Fathom Analytics Conversions | 59 | 14 | 47 | 400 | Non-prefixed function | ||
| #73 | Head, Footer and Post Injections | 55 | 9 | 52 | 200k+ | Non-prefixed global variable | ||
| #74 | Mailster Live | 48 | 22 | 37 | 600 | Missing Translators Comment | ||
| #75 | Parse.ly | 35 | 15 | 44 | 1k+ | Non-prefixed hook name | ||
| #76 | Super Simple Google Analytics | 48 | 55 | 3 | 2k+ | Output is not escaped | ||
| #77 | Lucky Orange | 76 | 56 | 0 | 2k+ | wp function not compatible with requires wp | ||
| #78 | Chartbeat | 42 | 33 | 18 | 900 | Output is not escaped | ||
| #79 | Known Agents – Track AI Bots and Crawlers, Block Scrapers, Analyze LLM Referral Traffic | 57 | 37 | 12 | 1k+ | Setting is missing a sanitization callback | ||
| #80 | Website Optimization – Plerdy | 73 | 48 | 1 | 1k+ | wp function not compatible with requires wp | ||
| #81 | Easy Share Solution For WordPress | 48 | 15 | 33 | 1k+ | Output is not escaped | ||
| #82 | BestPrice Analytics Integration | 70 | 35 | 10 | 1k+ | Text Domain Mismatch | ||
| #83 | Goolytics – Simple Google Analytics | 42 | 37 | 5 | 3k+ | Unsafe printing function | ||
| #84 | Analytics Head | 54 | 34 | 7 | 600 | Output is not escaped | ||
| #85 | Fathom Analytics for WP | 63 | 25 | 15 | 10k+ | Output is not escaped | ||
| #86 | Serviceform Pixel | 40 | 18 | 22 | 400 | Output is not escaped | ||
| #87 | Tiny gtag.js Analytics | 51 | 39 | 0 | 400 | Output is not escaped | ||
| #88 | WP Scroll Depth | 66 | 29 | 9 | 1k+ | Output is not escaped | ||
| #89 | WEBKINDER Integration for Google Analytics and Google Tag Manager | 70 | 15 | 22 | 10k+ | Output is not escaped | ||
| #90 | Integrate GA4 Google Analytics | 63 | 33 | 3 | 500 | Text Domain Mismatch | ||
| #91 | Mailster Google Analytics | 63 | 26 | 9 | 800 | Output is not escaped | ||
| #92 | Yandex.Metrika | 42 | 15 | 20 | 900 | Unsafe printing function | ||
| #93 | Analytify – Dashboard Widget for Google Analytics | 96 | 21 | 12 | 10k+ | wp function not compatible with requires wp | ||
| #94 | Aurora Heatmap | 35 | 14 | 18 | 20k+ | Non-prefixed global variable | ||
| #95 | Universal Google Analytics (GA3 and GA4) | 57 | 28 | 2 | 400 | Output is not escaped | ||
| #96 | Simple Matomo Tracking Code | 44 | 23 | 6 | 1k+ | Unsafe printing function | ||
| #97 | Siteimprove | 81 | 6 | 23 | 800 | Nonce verification recommended | ||
| #98 | Pageviews | 64 | 15 | 12 | 1k+ | Missing Translators Comment | ||
| #99 | etracker analytics | 59 | 16 | 9 | 1k+ | Exception output is not escaped | ||
| #100 | Piwik PRO | 35 | 22 | 3 | 2k+ | Output is not escaped |