Recently Scanned Analytics WordPress Plugins
139 indexed plugins
Plugins
139
Active Installs
11m+
Average Score
55
Audited
138
Recently Scanned
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Analytify – Google Analytics Dashboard For WordPress (GA4 analytics tracking) | 43 | 208 | 483 | 20k+ | Non-prefixed function | ||
| #2 | Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative) | 66 | 33 | 410 | 200k+ | Direct Query | ||
| #3 | Site Kit by Google – Analytics, Search Console, AdSense, Speed | 25 | 1,304 | 242 | 5m+ | Missing direct file access protection | ||
| #4 | SEO Booster | 26 | 403 | 1,331 | 1k+ | Non-prefixed global variable | ||
| #5 | Koko Analytics – Privacy-Friendly WordPress Analytics | 24 | 166 | 395 | 60k+ | Short PHP open tag found | ||
| #6 | HubSpot All-In-One Marketing – Forms, Popups, Live Chat | 98 | 2 | 4 | 200k+ | trademarked term | ||
| #7 | Sales Report for WooCommerce | 24 | 659 | 451 | 1k+ | Output is not escaped | ||
| #8 | User Activity Tracking and Log | 50 | 30 | 263 | 3k+ | Non-prefixed global variable | ||
| #9 | NewStatPress | 94 | 95 | 12 | 8k+ | wp function not compatible with requires wp | ||
| #10 | WP Client Reports | 100 | 3 | 6k+ | trademarked term | |||
| #11 | VigIA – AI Visibility, Analytics & Control | 100 | 0 | 1k+ | No open findings | |||
| #12 | ShinyStat Analytics | 43 | 65 | 8 | 1k+ | Output is not escaped | ||
| #13 | Connect Matomo – Analytics Dashboard for WordPress | 28 | 100 | 102 | 60k+ | Missing Translators Comment | ||
| #14 | Matomo Analytics – Powerful, Privacy-First Insights for WordPress | 19 | 1,911 | 877 | 100k+ | Exception output is not escaped | ||
| #15 | GTM Kit – Google Tag Manager & GA4 integration | 87 | 5 | 17 | 30k+ | Missing direct file access protection | ||
| #16 | BestPrice Analytics Integration | 70 | 35 | 10 | 1k+ | Text Domain Mismatch | ||
| #17 | SEO Engine – Smart SEO with AI, Schema & Redirection for WordPress | 24 | 239 | 304 | 1k+ | Direct Query | ||
| #18 | AMS Google Webmaster Tools | 76 | 10 | 3 | 400 | Output is not escaped | ||
| #19 | Fathom Analytics Conversions | 59 | 14 | 47 | 400 | Non-prefixed function | ||
| #20 | TopList.cz | 38 | 138 | 7 | 400 | Output is not escaped | ||
| #21 | Serviceform Pixel | 40 | 18 | 22 | 400 | Output is not escaped | ||
| #22 | Nimbata Call Tracking | 62 | 13 | 11 | 400 | Non-prefixed function | ||
| #23 | Tiny gtag.js Analytics | 51 | 39 | 0 | 400 | Output is not escaped | ||
| #24 | utm.codes | 43 | 34 | 33 | 400 | Missing nonce verification | ||
| #25 | Universal Google Analytics (GA3 and GA4) | 57 | 28 | 2 | 400 | Output is not escaped | ||
| #26 | Meow Analytics (Google Analytics) | 34 | 80 | 54 | 400 | Output is not escaped | ||
| #27 | Include Matomo Tracking, by Jonas Hellmann | 62 | 14 | 4 | 500 | Setting is missing a sanitization callback | ||
| #28 | Sopro | 97 | 4 | 4 | 500 | Non-prefixed function | ||
| #29 | Export Customers Data | 34 | 109 | 49 | 500 | Text Domain Mismatch | ||
| #30 | Integrate GA4 Google Analytics | 63 | 33 | 3 | 500 | Text Domain Mismatch | ||
| #31 | AH Google Analytics Code | 88 | 6 | 2 | 500 | Output is not escaped | ||
| #32 | AFS Analytics | 34 | 194 | 98 | 600 | Text Domain Mismatch | ||
| #33 | Mailster Live | 48 | 22 | 37 | 600 | Missing Translators Comment | ||
| #34 | Track, Analyze & Optimize by WP Tao | 23 | 895 | 756 | 600 | Output is not escaped | ||
| #35 | Analytics Head | 54 | 34 | 7 | 600 | Output is not escaped | ||
| #36 | Inspectlet – AI-Powered Session Replay, Heatmaps & Analytics | 83 | 13 | 2 | 700 | Text Domain Mismatch | ||
| #37 | Datalayer for WooCommerce FREE | 97 | 3 | 5 | 700 | Non-prefixed function | ||
| #38 | Siteimprove | 81 | 6 | 23 | 700 | Nonce verification recommended | ||
| #39 | Amplitude – Analytics, Session Replay, A/B testing and CDP for your website | 96 | 3 | 12 | 700 | Missing Version | ||
| #40 | Hitsteps Web Analytics | 34 | 370 | 313 | 800 | Output is not escaped | ||
| #41 | ミエルカヒートマップ タグマネージャー | 68 | 9 | 11 | 800 | Input is not validated | ||
| #42 | Analytics Spam Blocker | 37 | 76 | 22 | 800 | Unsafe printing function | ||
| #43 | WP Bannerize Pro | 32 | 281 | 216 | 800 | Text Domain Mismatch | ||
| #44 | Mailster Google Analytics | 63 | 26 | 9 | 900 | Output is not escaped | ||
| #45 | Yandex.Metrika | 42 | 15 | 20 | 900 | Unsafe printing function | ||
| #46 | TWIPLA (Visitor Analytics IO) – Privacy-First Website Stats, Session Recordings, Heatmaps, Polls and Surveys | 38 | 71 | 49 | 900 | Output is not escaped | ||
| #47 | Woopra Analytics Plugin | 34 | 114 | 53 | 900 | Output is not escaped | ||
| #48 | Easy Share Solution For WordPress | 48 | 15 | 33 | 900 | Output is not escaped | ||
| #49 | Usermaven | 42 | 36 | 77 | 1k+ | Request data is not unslashed | ||
| #50 | Chartbeat | 42 | 33 | 18 | 1k+ | Output is not escaped |
