Aurora Heatmap
Healthy: vulnerability published 7 Oct 2026, fixed in 1.7.3.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 95 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 7 Oct 2026, fixed in 1.7.3. Update to version 1.7.3 or later.7 Oct 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 15 Sep 2019 to 15 Sep 2019, 1 commits |
|---|---|
| r3098 | 20 Sep 2019 to 25 Sep 2026, 157 commits |
2 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 40 days ago
- Releases, 24 months
- 2
- Tested up to
- 7.1 current
- Requires PHP
- 7.0 supported 8.2+
| Q1 2024 | 3 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 1 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 1 |
| Q4 2026 | 0 |
Last release 25 Sep 2026. Tested with WordPress 7.1 (current).
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 7 Oct 2026 | Aurora Heatmap <= 1.7.2 - Unauthenticated Stored Cross-Site Scripting via 'url' Parameter | 6.1 | <= 1.7.2 | 1.7.3 | 0 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.7 from 7 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 6 |
|---|---|
| 4 star | 0 |
| 3 star | 1 |
| 2 star | 0 |
| 1 star | 0 |
Momentum
10,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 117 |
|---|---|
| 11 May 2026 | 187 |
| 18 May 2026 | 187 |
| 25 May 2026 | 163 |
| 1 Jun 2026 | 179 |
| 8 Jun 2026 | 162 |
| 15 Jun 2026 | 167 |
| 22 Jun 2026 | 175 |
| 29 Jun 2026 | 176 |
| 6 Jul 2026 | 185 |
| 13 Jul 2026 | 188 |
| 20 Jul 2026 | 215 |
| 27 Jul 2026 | 163 |
| 3 Aug 2026 | 194 |
| 10 Aug 2026 | 172 |
| 17 Aug 2026 | 198 |
| 24 Aug 2026 | 190 |
| 31 Aug 2026 | 178 |
| 7 Sep 2026 | 199 |
| 14 Sep 2026 | 216 |
| 21 Sep 2026 | 7,135 |
| 28 Sep 2026 | 1,486 |
| 5 Oct 2026 | 1,423 |
| 12 Oct 2026 | 731 |
| 19 Oct 2026 | 2,363 |
| 26 Oct 2026 | 878 |
| 2 Nov 2026 | 109 |
Weekly downloads over the last 4 weeks are 55% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.7.3 |
|---|---|
| Author | r3098 |
| Added | 20 Sep 2019 |
| Last updated | 25 Sep 2026 |
| Active installs | 10,000+ |
| Requires WordPress | 4.9 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.0 |
| Category | Analytics & Reporting > Traffic & Visitor Analytics |
| Tags | click, analyze, heatmap, Japanese, analytics |
Other plugins by this author: Confirm Theme Structure
Questions
Is Aurora Heatmap still maintained?
Aurora Heatmap was last updated on 25 Sep 2026. Its Canary status is Healthy.
Is Aurora Heatmap safe?
Aurora Heatmap has no open unpatched vulnerabilities on record. 1 vulnerability was published in the last 24 months. Its Canary status is Healthy.
Who owns Aurora Heatmap?
The wordpress.org author is r3098. Recent committers: r3098, plugin-master. We have recorded no ownership change.
What can I use instead of Aurora Heatmap?
Plugins in the same category with a higher Canary Score: Page Visits Counter - Lite, GA Google Analytics - Connect Google Analytics to WordPress, Matomo Analytics - Powerful, Privacy-First Insights for WordPress, Microsoft Clarity, Post Views Counter.