Burst Statistics - Simple WordPress Analytics (Google Analytics Alternative)
Healthy: vulnerability published 2 Oct 2026, fixed in 3.7.2.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 70 |
| Support | 95 |
| Reputation | 85 |
Active signals
Facts we detected, with links to the source.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 13 Jan 2022 to 13 Jan 2022, 1 commits |
|---|---|
| RogierLankhorst | 4 Feb 2022 to 29 Oct 2026, 264 commits |
| hesseldejong | 30 Mar 2022 to 22 Jan 2025, 142 commits |
3 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 6 days ago
- Releases, 24 months
- 62
- Tested up to
- 7.1 current
- Requires PHP
- 8.0 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 13 |
| Q4 2024 | 0 |
| Q1 2025 | 3 |
| Q2 2025 | 5 |
| Q3 2025 | 2 |
| Q4 2025 | 4 |
| Q1 2026 | 8 |
| Q2 2026 | 15 |
| Q3 2026 | 23 |
| Q4 2026 | 2 |
Last release 29 Oct 2026. Tested with WordPress 7.1 (current).
Support
95% of 20 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 2 Oct 2026 | Burst Statistics <= 3.7.1 - Improper Authentication to Account Persistence via Share-Link Authentication Bypass via 'burst_share_token' | 4.3 | <= 3.7.1 | 3.7.2 | 0 |
| 13 May 2026 | Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover | 9.8 | 3.4.0 to 3.4.1.1 | 3.4.2 | 128 |
| 27 Jun 2025 | Burst Statistics <= 2.0.6 - Cross-Site Request Forgery | 4.3 | <= 2.0.6 | 2.0.8 | 278 |
| 12 Mar 2024 | Burst Statistics – Privacy-Friendly Analytics for WordPress <= 1.5.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via burst_total_pageviews_count | 6.4 | <= 1.5.6.1 | 1.5.7 | 462 |
| 16 Jan 2024 | Burst Statistics Really Simple Plugins <= 1.5.3 - Authenticated (Editor+) SQL Injection | 7.2 | <= 1.5.3 | 1.5.4 | 248 |
| 6 Dec 2023 | Burst Statistics – Privacy-Friendly Analytics for WordPress 1.4.0 to 1.4.6.1 - Unauthenticated SQL Injection | 9.8 | 1.4.0 to 1.4.6.1 | 1.5.0 | 0 |
Source: Wordfence Intelligence.
Reputation
| Q3 2025 | 5.0 |
|---|---|
| Q4 2025 | 5.0 |
| Q1 2026 | 4.3 |
| Q2 2026 | 4.9 |
| Q3 2026 | 5.0 |
Average rating stayed at 5.0 between Q3 2025 and Q3 2026.
| 5 star | 175 |
|---|---|
| 4 star | 6 |
| 3 star | 0 |
| 2 star | 2 |
| 1 star | 3 |
- Lacks too much on free version · 2 stars · 16 Feb 2026
Momentum
200,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 68,053 |
|---|---|
| 11 May 2026 | 111,127 |
| 18 May 2026 | 109,457 |
| 25 May 2026 | 18,338 |
| 1 Jun 2026 | 100,332 |
| 8 Jun 2026 | 18,774 |
| 15 Jun 2026 | 97,017 |
| 22 Jun 2026 | 18,675 |
| 29 Jun 2026 | 171,439 |
| 6 Jul 2026 | 27,116 |
| 13 Jul 2026 | 102,699 |
| 20 Jul 2026 | 103,373 |
| 27 Jul 2026 | 19,083 |
| 3 Aug 2026 | 18,145 |
| 10 Aug 2026 | 10,737 |
| 17 Aug 2026 | 103,908 |
| 24 Aug 2026 | 19,193 |
| 31 Aug 2026 | 14,649 |
| 7 Sep 2026 | 96,419 |
| 14 Sep 2026 | 106,894 |
| 21 Sep 2026 | 30,282 |
| 28 Sep 2026 | 109,584 |
| 5 Oct 2026 | 26,512 |
| 12 Oct 2026 | 15,433 |
| 19 Oct 2026 | 114,356 |
| 26 Oct 2026 | 116,497 |
| 2 Nov 2026 | 6,268 |
Weekly downloads over the last 4 weeks are 3% below the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 3.7.4 |
|---|---|
| Author | Burst Statistics B.V. |
| Added | 4 Feb 2022 |
| Last updated | 29 Oct 2026 |
| Active installs | 200,000+ |
| Requires WordPress | 6.6 |
| Tested up to | 7.1.4 |
| Requires PHP | 8.0 |
| Category | Analytics & Reporting > Google Analytics Integration |
| Tags | analytics, statistics, google analytics, visitor tracking, cookieless analytics |
Other plugins by this author: SmartMatch Search, Burst MainWP
Questions
Is Burst Statistics - Simple WordPress Analytics (Google Analytics Alternative) still maintained?
Burst Statistics - Simple WordPress Analytics (Google Analytics Alternative) was last updated on 29 Oct 2026. Its Canary status is Healthy.
Is Burst Statistics - Simple WordPress Analytics (Google Analytics Alternative) safe?
Burst Statistics - Simple WordPress Analytics (Google Analytics Alternative) has no open unpatched vulnerabilities on record. 3 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Burst Statistics - Simple WordPress Analytics (Google Analytics Alternative)?
The wordpress.org author is Burst Statistics B.V.. Recent committers: RogierLankhorst, hesseldejong, plugin-master. We have recorded no ownership change.
What can I use instead of Burst Statistics - Simple WordPress Analytics (Google Analytics Alternative)?
Plugins in the same category with a higher Canary Score: Page Visits Counter - Lite, GA Google Analytics - Connect Google Analytics to WordPress, Matomo Analytics - Powerful, Privacy-First Insights for WordPress, Microsoft Clarity, Post Views Counter.