Recently Scanned Analytics WordPress Plugins
140 indexed plugins
Plugins
140
Active Installs
11m+
Average Score
56
Audited
139
Recently Scanned
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #51 | Mailster Live | 48 | 22 | 37 | 600 | Missing Translators Comment | ||
| #52 | Track, Analyze & Optimize by WP Tao | 23 | 895 | 756 | 600 | Output is not escaped | ||
| #53 | Analytics Head | 54 | 34 | 7 | 600 | Output is not escaped | ||
| #54 | Inspectlet – AI-Powered Session Replay, Heatmaps & Analytics | 83 | 13 | 2 | 700 | Text Domain Mismatch | ||
| #55 | Datalayer for WooCommerce FREE | 97 | 3 | 5 | 700 | Non-prefixed function | ||
| #56 | Siteimprove | 81 | 6 | 23 | 800 | Nonce verification recommended | ||
| #57 | Amplitude – Analytics, Session Replay, A/B testing and CDP for your website | 96 | 3 | 12 | 800 | Missing Version | ||
| #58 | ミエルカヒートマップ タグマネージャー | 68 | 9 | 11 | 800 | Input is not validated | ||
| #59 | Analytics Spam Blocker | 37 | 76 | 22 | 800 | Unsafe printing function | ||
| #60 | WP Bannerize Pro | 32 | 281 | 216 | 800 | Text Domain Mismatch | ||
| #61 | Mailster Google Analytics | 63 | 26 | 9 | 800 | Output is not escaped | ||
| #62 | Yandex.Metrika | 42 | 15 | 20 | 900 | Unsafe printing function | ||
| #63 | TWIPLA (Visitor Analytics IO) – Privacy-First Website Stats, Session Recordings, Heatmaps, Polls and Surveys | 38 | 71 | 49 | 900 | Output is not escaped | ||
| #64 | Woopra Analytics Plugin | 34 | 114 | 53 | 900 | Output is not escaped | ||
| #65 | Easy Share Solution For WordPress | 48 | 15 | 33 | 1k+ | Output is not escaped | ||
| #66 | Usermaven | 42 | 36 | 77 | 1k+ | Request data is not unslashed | ||
| #67 | Chartbeat | 42 | 33 | 18 | 1k+ | Output is not escaped | ||
| #68 | Known Agents – Track AI Bots and Crawlers, Block Scrapers, Analyze LLM Referral Traffic | 57 | 37 | 12 | 1k+ | Setting is missing a sanitization callback | ||
| #69 | Analytics Tracker | 35 | 4 | 5 | 1k+ | Hidden files included | ||
| #70 | Simple Matomo Tracking Code | 44 | 23 | 6 | 1k+ | Unsafe printing function | ||
| #71 | Simple Analytics | 97 | 6 | 3 | 1k+ | Missing Translators Comment | ||
| #72 | WP Scroll Depth | 66 | 29 | 9 | 1k+ | Output is not escaped | ||
| #73 | Analytics by BestWebSoft – Google Analytics Dashboard and Statistic Plugin for WordPress | 49 | 478 | 176 | 1k+ | Text Domain Mismatch | ||
| #74 | Simple Google Analytics Tracking | 91 | 6 | 2 | 1k+ | Missing direct file access protection | ||
| #75 | Website Optimization – Plerdy | 73 | 48 | 1 | 1k+ | wp function not compatible with requires wp | ||
| #76 | Pageviews | 64 | 15 | 12 | 1k+ | Missing Translators Comment | ||
| #77 | etracker analytics | 59 | 16 | 9 | 1k+ | Exception output is not escaped | ||
| #78 | SV Tracking Manager | 27 | 968 | 129 | 1k+ | Output is not escaped | ||
| #79 | StoryChief | 51 | 12 | 55 | 1k+ | Input is not sanitized | ||
| #80 | SlimStat Analytics | 25 | 1,177 | 870 | 70k+ | Exception output is not escaped | ||
| #81 | Lead Forensics | 93 | 1 | 5 | 5k+ | Non-prefixed hook name | ||
| #82 | PufferSights – AI Crawler Insights | 100 | 0 | 0 | No open findings | |||
| #83 | heatmap for WordPress – Realtime analytics | 40 | 94 | 15 | 1k+ | Non Singular String Literal Domain | ||
| #84 | Global Site Tag Tracking | 79 | 11 | 1 | 1k+ | Output is not escaped | ||
| #85 | Audience Analytics – by Quantcast | 76 | 17 | 3 | 1k+ | Text Domain Mismatch | ||
| #86 | OPcache Manager | 35 | 155 | 75 | 1k+ | Output is not escaped | ||
| #87 | Traffic Monitor | 39 | 6 | 143 | 1k+ | Direct Query | ||
| #88 | Skroutz Analytics for WooCommerce | 53 | 57 | 15 | 1k+ | Text Domain Mismatch | ||
| #89 | Tracking Script Manager | 37 | 82 | 57 | 2k+ | Non Singular String Literal Domain | ||
| #90 | Lucky Orange | 76 | 56 | 0 | 2k+ | wp function not compatible with requires wp | ||
| #91 | Integrate Umami | 35 | 10 | 0 | 2k+ | Hidden files included | ||
| #92 | Goal Tracker – Custom Event Tracking for GA4 | 38 | 541 | 25 | 2k+ | Output is not escaped | ||
| #93 | WP Views Counter | 35 | 81 | 42 | 2k+ | Output is not escaped | ||
| #94 | Super Simple Google Analytics | 48 | 55 | 3 | 2k+ | Output is not escaped | ||
| #95 | Better Google Analytics | 29 | 376 | 869 | 2k+ | Non-prefixed global variable | ||
| #96 | Search Analytics for WP | 99 | 5 | 2 | 3k+ | wp function not compatible with requires wp | ||
| #97 | Tracking and Consent Manager – WP Full Picture | 23 | 1,280 | 3,223 | 3k+ | Non-prefixed global variable | ||
| #98 | Opt-Out for Google Analytics (DSGVO / GDPR) | 24 | 290 | 1,978 | 3k+ | Non-prefixed global variable | ||
| #99 | Local Google Analytics for WordPress – caches external requests | 23 | 551 | 199 | 3k+ | Output is not escaped | ||
| #100 | Goolytics – Simple Google Analytics | 42 | 37 | 5 | 3k+ | Unsafe printing function |
