Analytics WordPress Plugins That Need Review
140 indexed plugins
Plugins
140
Active Installs
11m+
Average Score
56
Audited
139
Needs Review
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Matomo Analytics – Powerful, Privacy-First Insights for WordPress | 19 | 1,900 | 877 | 100k+ | Exception output is not escaped | ||
| #2 | Tracking and Consent Manager – WP Full Picture | 23 | 1,280 | 3,223 | 3k+ | Non-prefixed global variable | ||
| #3 | GAinWP Google Analytics Integration for WordPress | 23 | 525 | 176 | 8k+ | Output is not escaped | ||
| #4 | Local Google Analytics for WordPress – caches external requests | 23 | 551 | 199 | 3k+ | Output is not escaped | ||
| #5 | Track, Analyze & Optimize by WP Tao | 23 | 895 | 756 | 600 | Output is not escaped | ||
| #6 | ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) | 24 | 158 | 435 | 300k+ | Nonce verification recommended | ||
| #7 | Koko Analytics – Privacy-Friendly WordPress Analytics | 24 | 166 | 398 | 60k+ | Short PHP open tag found | ||
| #8 | Opt-Out for Google Analytics (DSGVO / GDPR) | 24 | 290 | 1,978 | 3k+ | Non-prefixed global variable | ||
| #9 | Sales Report for WooCommerce | 24 | 659 | 451 | 1k+ | Output is not escaped | ||
| #10 | SEO Engine – Smart SEO with AI, Schema & Redirection for WordPress | 24 | 246 | 300 | 1k+ | Direct Query | ||
| #11 | UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds | 24 | 441 | 235 | 200k+ | Text Domain Mismatch | ||
| #12 | MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) | 25 | 157 | 435 | 2m+ | Nonce verification recommended | ||
| #13 | Site Kit by Google – Analytics, Search Console, AdSense, Speed | 25 | 1,318 | 242 | 5m+ | Missing direct file access protection | ||
| #14 | Independent Analytics – WordPress Analytics Plugin | 25 | 1,150 | 2,309 | 100k+ | Non-prefixed global variable | ||
| #15 | Enhanced Ecommerce Google Analytics for WooCommerce | 25 | 909 | 1,506 | 2k+ | Non-prefixed global variable | ||
| #16 | SlimStat Analytics | 25 | 1,177 | 870 | 70k+ | Exception output is not escaped | ||
| #17 | WP Statistics – Simple, privacy-friendly Google Analytics alternative | 25 | 612 | 2,469 | 600k+ | Non-prefixed global variable | ||
| #18 | SEO Booster | 27 | 264 | 1,082 | 1k+ | Non-prefixed global variable | ||
| #19 | SV Tracking Manager | 27 | 968 | 129 | 1k+ | Output is not escaped | ||
| #20 | GTmetrix for WordPress | 28 | 109 | 70 | 8k+ | Output is not escaped | ||
| #21 | Connect Matomo – Analytics Dashboard for WordPress | 28 | 100 | 111 | 60k+ | Nonce verification recommended | ||
| #22 | Better Google Analytics | 29 | 376 | 869 | 2k+ | Non-prefixed global variable | ||
| #23 | Post Views Counter | 29 | 179 | 398 | 200k+ | Non-prefixed hook name | ||
| #24 | WP Google Analytics Events – No-Code Custom Event Tracking for Google Analytics | 29 | 118 | 128 | 5k+ | Output is not escaped | ||
| #25 | QA Assistants – Driven by data | 30 | 4 | 867 | 2k+ | Non-prefixed global variable | ||
| #26 | HT Easy GA4 – Google Analytics WordPress Plugin | 31 | 475 | 93 | 6k+ | Text Domain Mismatch | ||
| #27 | WP Visitor Statistics (Real Time Traffic) | 31 | 353 | 691 | 20k+ | Nonce verification recommended | ||
| #28 | WP Bannerize Pro | 32 | 281 | 216 | 800 | Text Domain Mismatch | ||
| #29 | Clicky Analytics | 33 | 166 | 92 | 10k+ | Output is not escaped | ||
| #30 | AFS Analytics | 34 | 194 | 98 | 500 | Text Domain Mismatch | ||
| #31 | Export Customers Data | 34 | 109 | 49 | 500 | Text Domain Mismatch | ||
| #32 | Hitsteps Web Analytics | 34 | 410 | 322 | 800 | Output is not escaped | ||
| #33 | Meow Analytics (Google Analytics) | 34 | 80 | 54 | 400 | Output is not escaped | ||
| #34 | Seriously Simple Stats | 34 | 99 | 126 | 5k+ | Output is not escaped | ||
| #35 | Woopra Analytics Plugin | 34 | 114 | 53 | 900 | Output is not escaped | ||
| #36 | Analytics Tracker | 35 | 4 | 5 | 1k+ | Hidden files included | ||
| #37 | Aurora Heatmap | 35 | 14 | 18 | 20k+ | Non-prefixed global variable | ||
| #38 | Integrate Umami | 35 | 10 | 0 | 2k+ | Hidden files included | ||
| #39 | OPcache Manager | 35 | 155 | 75 | 1k+ | Output is not escaped | ||
| #40 | Piwik PRO | 35 | 22 | 3 | 2k+ | Output is not escaped | ||
| #41 | Plausible Analytics | 35 | 256 | 68 | 10k+ | Exception output is not escaped | ||
| #42 | Parse.ly | 35 | 15 | 44 | 1k+ | Non-prefixed hook name | ||
| #43 | WP Views Counter | 35 | 81 | 42 | 2k+ | Output is not escaped | ||
| #44 | Lara's Google Analytics (GA4) | 36 | 303 | 57 | 9k+ | Unsafe printing function | ||
| #45 | Analytics Spam Blocker | 37 | 76 | 22 | 800 | Unsafe printing function | ||
| #46 | Website Pop-up Builder by BDOW! (formerly Sumo): Pop-ups + forms for email opt-ins and lead generation | 37 | 42 | 33 | 10k+ | Output is not escaped | ||
| #47 | Tracking Script Manager | 37 | 82 | 57 | 2k+ | Non Singular String Literal Domain | ||
| #48 | Goal Tracker – Custom Event Tracking for GA4 | 38 | 541 | 25 | 2k+ | Output is not escaped | ||
| #49 | CAOS | Host Google Analytics Locally | 38 | 124 | 44 | 10k+ | Output is not escaped | ||
| #50 | SRS Simple Hits Counter | 38 | 43 | 98 | 8k+ | Output is not escaped |
