Hotjar
At risk: no release in 36 months (last release 25 Oct 2023).
Capped at 59 while a Critical signal is open.
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 100 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 15 Jan 2019 to 15 Jan 2019, 1 commits |
|---|---|
| hotjar | 16 Jan 2019 to 25 Oct 2023, 55 commits |
2 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 3 years ago
- Releases, 24 months
- 0
- Tested up to
- 6.0 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 25 Oct 2023. Tested up to 6.0, 11 major versions behind WordPress 7.1.
Support
0% of 1 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 5 Oct 2023 | Hotjar <= 1.0.15 - Authenticated (Administrator+) Stored Cross-Site Scripting | 4.4 | <= 1.0.15 | 1.0.16 | 20 |
Source: Wordfence Intelligence.
Reputation
Average rating 1.0 in Q2 2024.
| 5 star | 7 |
|---|---|
| 4 star | 2 |
| 3 star | 0 |
| 2 star | 1 |
| 1 star | 8 |
- Used to be good · 1 star · 6 Jun 2024
- doesn’t work · 1 star · 3 Sep 2023
- Does not show up anywhere · 1 star · 26 May 2023
Momentum
60,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 261 |
|---|---|
| 11 May 2026 | 558 |
| 18 May 2026 | 634 |
| 25 May 2026 | 481 |
| 1 Jun 2026 | 486 |
| 8 Jun 2026 | 498 |
| 15 Jun 2026 | 520 |
| 22 Jun 2026 | 542 |
| 29 Jun 2026 | 591 |
| 6 Jul 2026 | 529 |
| 13 Jul 2026 | 470 |
| 20 Jul 2026 | 560 |
| 27 Jul 2026 | 467 |
| 3 Aug 2026 | 542 |
| 10 Aug 2026 | 567 |
| 17 Aug 2026 | 514 |
| 24 Aug 2026 | 631 |
| 31 Aug 2026 | 605 |
| 7 Sep 2026 | 603 |
| 14 Sep 2026 | 662 |
| 21 Sep 2026 | 637 |
| 28 Sep 2026 | 707 |
| 5 Oct 2026 | 700 |
| 12 Oct 2026 | 585 |
| 19 Oct 2026 | 882 |
| 26 Oct 2026 | 967 |
| 2 Nov 2026 | 144 |
Weekly downloads over the last 4 weeks are 13% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.0.16 |
|---|---|
| Author | Hotjar |
| Added | 16 Jan 2019 |
| Last updated | 25 Oct 2023 |
| Active installs | 60,000+ |
| Requires WordPress | 4.6 |
| Tested up to | 6.0.18 |
| Requires PHP | not stated |
| Category | Analytics & Reporting > Traffic & Visitor Analytics |
| Tags | hotjar, visual, heatmaps, insights, recordings |
Questions
Is Hotjar still maintained?
Hotjar was last updated on 25 Oct 2023. Its Canary status is At risk.
Is Hotjar safe?
Hotjar has no open unpatched vulnerabilities on record. 0 vulnerabilities were published in the last 24 months. Its Canary status is At risk.
Who owns Hotjar?
The wordpress.org author is Hotjar. Recent committers: hotjar, plugin-master. We have recorded no ownership change.
What can I use instead of Hotjar?
Plugins in the same category with a higher Canary Score: Page Visits Counter - Lite, GA Google Analytics - Connect Google Analytics to WordPress, Matomo Analytics - Powerful, Privacy-First Insights for WordPress, Microsoft Clarity, Post Views Counter.