Skip to content
PluginCanary

WP-Stats

by Lester Chan · 2,000+ active installs · Checked 3 Nov 2026
Healthy2 Warnings

Healthy: vulnerability published 7 Aug 2026, fixed in 2.56.1.

86/ 100 Canary Score
Sub-scores for WP-Stats
Ownership100
Maintenance100
Security80
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 7 Aug 2026, fixed in 2.56.1. Update to version 2.56.1 or later.7 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 7 Aug 2026, fixed in 2.56.1. Update to version 2.56.1 or later.7 Aug 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
GamerZ3 Jan 2006 to 1 Sep 2026, 191 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
2 months ago
Releases, 24 months
3
Tested up to
7.1 current
Requires PHP
8.2 supported 8.2+
Releases per quarter for WP-Stats
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20263
Q4 20260

Last release 1 Sep 2026. Tested with WordPress 7.1 (current).

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
7 Aug 2026WP-Stats <= 2.56 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.562.56.10
7 Aug 2026WP-Stats <= 2.56 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.562.56.10
17 Jun 2015WP-Stats < 2.52 - Cross-Site Request Forgery4.3< 2.522.52n/a

Source: Wordfence Intelligence.

Reputation

Lifetime rating 2.6 from 7 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star2
4 star1
3 star0
2 star0
1 star4

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP-Stats
4 May 202619
11 May 202634
18 May 202629
25 May 202636
1 Jun 202680
8 Jun 2026167
15 Jun 202650
22 Jun 202622
29 Jun 202633
6 Jul 202622
13 Jul 202637
20 Jul 2026960
27 Jul 2026236
3 Aug 2026639
10 Aug 2026556
17 Aug 2026310
24 Aug 2026172
31 Aug 2026738
7 Sep 2026193
14 Sep 2026183
21 Sep 2026178
28 Sep 2026144
5 Oct 2026157
12 Oct 2026132
19 Oct 2026231
26 Oct 2026205
2 Nov 202622

Weekly downloads over the last 4 weeks are 29% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Post Views CounterScore 93 · 100,000+Page Visits Counter - LiteScore 93 · 5,000+GA Google Analytics - Connect Google Analytics to WordPressScore 92 · 400,000+Matomo Analytics - Powerful, Privacy-First Insights for WordPressScore 92 · 100,000+Microsoft ClarityScore 91 · 200,000+

Facts

Version3.0.1
AuthorLester Chan
Added3 Jan 2006
Last updated1 Sep 2026
Active installs2,000+
Requires WordPress6.8
Tested up to7.1.4
Requires PHP8.2
CategoryAnalytics & Reporting > Traffic & Visitor Analytics
Tagsstats, widget, popular, statistics, information

Other plugins by this author: WP-PageNavi, WP-Sweep, WP-PostViews, WP-DBManager, WP-Polls, WP-PostRatings, WP-ServerInfo, WP-UserOnline, WP-ShowHide, WP-Print, WP-Ban, WP-DownloadManager

Questions

Is WP-Stats still maintained?

WP-Stats was last updated on 1 Sep 2026. Its Canary status is Healthy.

Is WP-Stats safe?

WP-Stats has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns WP-Stats?

The wordpress.org author is Lester Chan. Recent committers: GamerZ, matt. We have recorded no ownership change.

What can I use instead of WP-Stats?

Plugins in the same category with a higher Canary Score: Post Views Counter, Page Visits Counter - Lite, GA Google Analytics - Connect Google Analytics to WordPress, Matomo Analytics - Powerful, Privacy-First Insights for WordPress, Microsoft Clarity.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue