| #1 | MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) | 25 | 116 | 441 | 2m+ | | | Nonce verification recommended |
| #2 | ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) | 24 | 118 | 442 | 300k+ | | | Nonce verification recommended |
| #3 | WP Statistics – Simple, privacy-friendly Google Analytics alternative | 25 | 610 | 2,465 | 600k+ | | | Non-prefixed global variable |
| #4 | GTM4WP – A Google Tag Manager (GTM) plugin for WordPress | 91 | 59 | 79 | 700k+ | | | Non-prefixed global variable |
| #5 | Google Analytics for WooCommerce | 98 | | 20 | 100k+ | | | Non-prefixed class |
| #6 | GA Google Analytics – Connect Google Analytics to WordPress | 42 | 46 | 30 | 400k+ | | | Output is not escaped |
| #7 | VK All in One Expansion Unit | 23 | 1,026 | 518 | 100k+ | | | Output is not escaped |
| #8 | Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative) | 69 | 33 | 368 | 200k+ | | | Direct Query |
| #9 | ShareThis Dashboard for Google Analytics | 90 | 4 | 272 | 80k+ | | | Non-prefixed global variable |
| #10 | Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic | 21 | 327 | 181 | 10k+ | | | Output is not escaped |
| #11 | Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing | 35 | 49 | 229 | 50k+ | | | Non-prefixed hook name |
| #12 | Conversios: Google Analytics (GA4), Google Ads, Conversion and Analytics Tracking for Multi-Channels | 24 | 107 | 1,461 | 10k+ | | | Non-prefixed global variable |
| #13 | Independent Analytics – WordPress Analytics Plugin | 25 | 1,148 | 2,293 | 100k+ | | | Non-prefixed global variable |
| #14 | Insert Headers And Footers | 34 | 83 | 113 | 300k+ | | | Non-prefixed global variable |
| #15 | Analytify – Google Analytics Dashboard For WordPress (GA4 analytics tracking) | 25 | 169 | 295 | 20k+ | | | Non-prefixed global variable |
| #16 | Koko Analytics – Privacy-Friendly WordPress Analytics | 24 | 161 | 280 | 60k+ | | | Short PHP open tag found |
| #17 | WP Visitor Statistics (Real Time Traffic) | 31 | 353 | 691 | 20k+ | | | Nonce verification recommended |
| #18 | Wp-Insert | 22 | 267 | 301 | 10k+ | | | Output is not escaped |
| #19 | Event Tracking for Gravity Forms | 43 | 34 | 25 | 20k+ | | | rand mt rand |
| #20 | Analytify – Dashboard Widget for Google Analytics | 96 | 21 | 12 | 10k+ | | | wp function not compatible with requires wp |
| #21 | WEBKINDER Integration for Google Analytics and Google Tag Manager | 70 | 15 | 22 | 10k+ | | | Output is not escaped |
| #22 | Lara's Google Analytics (GA4) | 36 | 303 | 57 | 9k+ | | | Unsafe printing function |
| #23 | WP Google Analytics Events – No-Code Custom Event Tracking for Google Analytics | 29 | 118 | 128 | 5k+ | | | Output is not escaped |
| #24 | Tag Manager – Header, Body And Footer | 38 | 97 | 319 | 20k+ | | | Non-prefixed global variable |
| #25 | Local Google Analytics for WordPress – caches external requests | 23 | 551 | 199 | 3k+ | | | Output is not escaped |
| #26 | Analytics Cat – Google Analytics Made Easy | 40 | 83 | 27 | 6k+ | | | Text Domain Mismatch |
| #27 | Analytics Insights – Google Analytics Dashboard for WordPress | 30 | 241 | 170 | 10k+ | | | Unsafe printing function |
| #28 | Better Google Analytics | 29 | 376 | 869 | 2k+ | | | Non-prefixed global variable |
| #29 | Beehive Analytics – Google Analytics Dashboard | 90 | 611 | 22 | 20k+ | | | Text Domain Mismatch |
| #30 | HT Easy GA4 – Google Analytics WordPress Plugin | 31 | 475 | 93 | 6k+ | | | Text Domain Mismatch |
| #31 | Contact Form 7 Google Analytics | 90 | 6 | 5 | 7k+ | | | trademarked term |
| #32 | GAinWP Google Analytics Integration for WordPress | 23 | 525 | 176 | 8k+ | | | Output is not escaped |
| #33 | Insert Headers and Footers Code – HT Script | 36 | 391 | 34 | 7k+ | | | Text Domain Mismatch |
| #34 | Fathom Analytics for WP | 63 | 25 | 15 | 10k+ | | | Output is not escaped |
| #35 | Opt-Out for Google Analytics (DSGVO / GDPR) | 24 | 290 | 1,978 | 3k+ | | | Non-prefixed global variable |
| #36 | Analytics by BestWebSoft – Google Analytics Dashboard and Statistic Plugin for WordPress | 49 | 478 | 176 | 1k+ | | | Text Domain Mismatch |
| #37 | Enhanced Ecommerce Google Analytics for WooCommerce | 24 | 771 | 1,480 | 2k+ | | | Non-prefixed global variable |
| #38 | WP Global Site Tag | 45 | 48 | 9 | 7k+ | | | Output is not escaped |
| #39 | AWCA – The Great Analytics Insights for Your eStore | 38 | 238 | 143 | 2k+ | | | Output is not escaped |
| #40 | Flying Analytics: Self-Host Google Analytics v4 with Speed Optimization | 35 | 17 | 13 | 5k+ | | | Missing direct file access protection |
| #41 | True Lazy Analytics | 75 | 11 | 13 | 6k+ | | | Nonce verification recommended |
| #42 | Simple Universal Google Analytics | 78 | 11 | 0 | 4k+ | | | Output is not escaped |
| #43 | GA4WP – Analytics Dashboard for the Website | 35 | 434 | 157 | 2k+ | | | Text Domain Mismatch |
| #44 | Surbma | GDPR Proof Cookie Consent & Notice Bar | 24 | 825 | 1,309 | 500 | | | Non-prefixed global variable |
| #45 | DCO Insert Analytics Code | 93 | 2 | 0 | 4k+ | | | Setting is missing a sanitization callback |
| #46 | Analytics Tracker | 35 | 4 | 5 | 1k+ | | | Hidden files included |
| #47 | Cache External Scripts | 76 | 21 | 4 | 900 | | | Output is not escaped |
| #48 | Global Site Tag Tracking | 79 | 11 | 1 | 1k+ | | | Output is not escaped |
| #49 | Meow Analytics (Google Analytics) | 34 | 80 | 54 | 400 | | | Output is not escaped |
| #50 | Bot Block – Stop Spam Referrals in Google Analytics | 38 | 28 | 42 | 600 | | | Output is not escaped |
