Skip to content
PluginCanary

ExactMetrics

by Syed Balkhi · 200,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: released 49 days ago, tested with WordPress 7.1, no open vulnerabilities.

86/ 100Healthy
Canary Score

Based on 3 of 5 areas

Sub-scores for ExactMetrics
Ownership100
Maintenance100
Security60
SupportNo data
ReputationNo data

How the score works

Active signals

Open issues right now, with links to the source.

  • InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

History: 7 past vulnerabilities, all patched. Patched issues are listed in the Security record, not here.

Quick answers

Is ExactMetrics still maintained?
Yes. Last release 16 Sep 2026, 42 releases in the last 24 months. 16 Sep 2026 · wordpress.org
Who owns ExactMetrics, and has it changed hands?
Changed. New committer AhmedGeek made a first commit on 19 Aug 2026. 19 Aug 2026 · SVN log
Was ExactMetrics removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is ExactMetrics safe?
7 known vulnerabilities, all fixed (latest in 9.1.3). Not on the exploited list. 23 Apr 2026 · Wordfence Intelligence
Is the latest ExactMetrics update safe to install?
Caution. Ownership change before 10.3.0: new committer AhmedGeek made a first commit on 19 Aug 2026. No one-star spike after it. 16 Sep 2026 · Release history

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
chriscct79 May 2018 to 2 May 2023, 71 commits
gripgrip3 Nov 2020 to 13 Jul 2021, 24 commits
manejaam24 Jan 2022 to 2 May 2023, 38 commits
micheleam11 Apr 2023 to 19 Sep 2024, 33 commits
dpaternina22 Oct 2024 to 29 Jul 2026, 44 commits
AhmedGeek19 Aug 2026 to 1 Oct 2026, 7 commits

New committer AhmedGeek made a first commit on 19 Aug 2026.

Maintenance

Last release
49 days ago
Releases, 24 months
42
Tested up to
7.1 current
Requires PHP
7.2 supported 8.2+
Releases per quarter
Releases per quarter for ExactMetrics
Q1 20246
Q2 20242
Q3 20244
Q4 20245
Q1 20255
Q2 20255
Q3 20256
Q4 20255
Q1 20268
Q2 20264
Q3 20266
Q4 20260

Last release 16 Sep 2026. Tested with WordPress 7.1 (current).

Support

Resolved, last 2 months
100%
Threads, last 2 months
1

Trend appears after 8 weekly snapshots.

Security record

5 vulnerabilities in 24 months (7 on record), all patched (latest fixed in 9.1.3).

Show 7 patched vulnerabilities
DateIssueCVSSAffectedFixed inDays to patch
23 Apr 2026Authenticated (Subscriber+) Missing Authorization to Google Ads Access Token Retrieval via AJAX Action 'exactmetrics_ads_get_token'5.3<= 9.1.29.1.3Before disclosure
22 Apr 2026Authenticated (Editor+) Arbitrary Plugin Installation/Activation via exactmetrics_connect_process7.2<= 9.1.29.1.3Same day
10 Mar 2026Authenticated (Custom) Improper Privilege Management to Role Privilege Escalation via Settings Update8.87.1.0 to 9.0.29.0.3Before disclosure
10 Mar 2026Authenticated (Custom) Insecure Direct Object Reference to Arbitrary Plugin Installation8.88.0.0 to 9.0.29.0.3Before disclosure
24 Jan 2025Missing Authorization4.3<= 8.1.08.2.0Before disclosure
9 May 2023Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 7.14.17.14.2Before disclosure
13 Jan 2023Authenticated (Contributor+) Cross-Site Scripting6.4<= 7.12.07.12.1Same day

Changelog mentions of security fixes: 10.1.2 (security); 10.1.3 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Reputation

Last 90 days: no reviews. Lifetime: 2.5.

Last 90 days vs lifetime average rating for ExactMetrics
Last 90 daysNo reviews
Lifetime2.5
Average rating per quarter
Average rating per quarter for ExactMetrics
Q4 20233.7
Q1 20242.3
Q2 20243.0
Q3 20245.0
Q4 20245.0
Q1 20255.0
Q3 20265.0

Average rating rose from 3.7 to 5.0 between Q4 2023 and Q3 2026.

Rating distribution
5 star539
4 star43
3 star14
2 star24
1 star926
Latest low reviews

Momentum

Active installs
200,000+
Downloads, last full week
16,515
Weekly downloads, last 26 complete weeks
Weekly downloads for ExactMetrics
4 May 20266,162
11 May 202616,228
18 May 2026129,873
25 May 2026237,584
1 Jun 202627,043
8 Jun 202618,626
15 Jun 202616,173
22 Jun 202614,773
29 Jun 202614,246
6 Jul 202618,969
13 Jul 2026138,836
20 Jul 2026145,161
27 Jul 2026150,190
3 Aug 202632,537
10 Aug 202620,670
17 Aug 2026149,624
24 Aug 202627,490
31 Aug 2026115,463
7 Sep 202627,075
14 Sep 2026126,734
21 Sep 202629,102
28 Sep 202619,394
5 Oct 202617,816
12 Oct 202614,837
19 Oct 202621,593
26 Oct 202616,515

Weekly downloads over the last 4 weeks are 70% below the 26-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score. Never sponsored.

GA Google AnalyticsScore 95 · 400,000+Microsoft ClarityScore 95 · 200,000+TikTokScore 95 · 200,000+

Facts

Full name
ExactMetrics - Google Analytics Dashboard for WordPress (Website Stats Plugin)
Version
10.3.0
Author
Syed Balkhi
Added
12 Mar 2013
Last updated
16 Sep 2026
Active installs
200,000+
Requires WordPress
5.6.0
Tested up to
7.1.4
Requires PHP
7.2
Category
Analytics & Reporting > Google Analytics Integration
Tags
analytics, website stats, google analytics, google analytics plugin, google analytics dashboard

Other plugins by this author: WPForms, WP Mail SMTP by WPForms, WPCode, All in One SEO, Smash Balloon Social Photo Feed, Popup Builder & Popup Maker for, Duplicator, One Click Demo Import, Easy WP SMTP, WP Mail Logging, WP Crontrol, Photo Gallery, Sliders, Proofing and

Questions about ExactMetrics

Is ExactMetrics still maintained?

Yes. Last release 16 Sep 2026, 42 releases in the last 24 months.

Who owns ExactMetrics, and has it changed hands?

Changed. New committer AhmedGeek made a first commit on 19 Aug 2026.

Was ExactMetrics removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is ExactMetrics safe?

7 known vulnerabilities, all fixed (latest in 9.1.3). Not on the exploited list.

Is the latest ExactMetrics update safe to install?

Caution. Ownership change before 10.3.0: new committer AhmedGeek made a first commit on 19 Aug 2026. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue