Skip to content
PluginCanary

WP Visitor Statistics (Real Time Traffic)

by osama.esh · 20,000+ active installs · Checked 3 Nov 2026
Healthy4 Warnings

Healthy: vulnerability published 28 Oct 2026, fixed in 8.8.

81/ 100 Canary Score
Sub-scores for WP Visitor Statistics (Real Time Traffic)
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 28 Oct 2026, fixed in 8.8. Update to version 8.8 or later.28 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 28 Oct 2026, fixed in 8.8. Update to version 8.8 or later.28 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 27 Oct 2026, fixed in 8.9. Update to version 8.9 or later.27 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 2 Oct 2026, fixed in 8.7.1. Update to version 8.7.1 or later.2 Oct 2026Evidence
  • InfoSEC-311 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
osamaesh24 Oct 2017 to 4 Nov 2026, 260 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
8 days ago
Releases, 24 months
19
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter for WP Visitor Statistics (Real Time Traffic)
Q1 20240
Q2 20240
Q3 20241
Q4 20242
Q1 20256
Q2 20251
Q3 20253
Q4 20251
Q1 20260
Q2 20262
Q3 20261
Q4 20263

Last release 27 Oct 2026. Tested with WordPress 7.1 (current).

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
28 Oct 2026Visitor Statistics (Real Time Traffic) <= 8.7 - Authenticated (Administrator+) SQL Injection4.9<= 8.78.80
28 Oct 2026Visitor Statistics (Real Time Traffic) <= 8.7 - Unauthenticated Stored Cross-Site Scripting7.2<= 8.78.80
27 Oct 2026WP Visitor Statistics (Real Time Traffic) <= 8.8 - Authenticated (Contributor+) SQL Injection via 'from' Shortcode Attribute6.5<= 8.88.90
2 Oct 2026WP Visitor Statistics (Real Time Traffic) <= 8.7 - Unauthenticated SQL Injection via 'fullRef' Parameter7.5<= 8.78.7.10
7 Apr 2026WP Visitor Statistics (Real Time Traffic) <= 8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height' Shortcode Attribute6.4<= 8.48.50
15 Dec 2025Visitor Statistics (Real Time Traffic) <= 8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 8.38.40
20 Aug 2025WP Visitor Statistics (Real Time Traffic) <= 8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 8.28.30
3 Jul 2025WP Visitor Statistics (Real Time Traffic) <= 7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 7.87.90
19 Jun 2025WP Visitor Statistics (Real Time Traffic) <= 8.4 - Missing Authorization5.3<= 8.48.5289
24 Jan 2025WP Visitor Statistics (Real Time Traffic) <= 7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 7.27.30
6 Jan 2025WP Visitor Statistics (Real Time Traffic) <= 7.5 - Missing Authorization4.3<= 7.57.626
2 Feb 2024WP Visitor Statistics (Real Time Traffic) <= 6.9.4 - Sensitive Information Exposure via Log File5.3<= 6.9.46.9.50
24 Apr 2023WP Visitor Statistics (Real Time Traffic) <= 6.8.1 - Unauthenticated SQL Injection9.8<= 6.8.16.90
17 Jan 2023WP Visitor Statistics (Real Time Traffic) <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 6.46.50
6 Jul 2022WP Visitor Statistics (Real Time Traffic) <= 5.7 - Unauthenticated SQL Injection9.8<= 5.75.80
14 Feb 2022WP Visitor Statistics (Real Time Traffic) <= 5.5 - SQL Injection8.8< 5.65.60
31 Jan 2022WP Visitor Statistics (Real Time Traffic) <= 5.4 - Missing Authorization to Stored Cross-Site Scripting5.4<= 5.45.50
22 Dec 2021WP Visitor Statistics (Real Time Traffic) <= 4.7 - SQL Injection8.8< 4.84.80

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for WP Visitor Statistics (Real Time Traffic)
Q1 20245.0
Q2 20244.8
Q3 20244.8
Q4 20244.5
Q1 20253.9
Q2 20251.0
Q3 20255.0
Q4 20254.3
Q1 20265.0
Q2 20265.0

Average rating stayed at 5.0 between Q1 2024 and Q2 2026.

Rating distribution
5 star120
4 star15
3 star4
2 star8
1 star9
Latest low reviews

Momentum

20,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP Visitor Statistics (Real Time Traffic)
4 May 2026499
11 May 2026911
18 May 20261,343
25 May 2026896
1 Jun 20265,730
8 Jun 20266,578
15 Jun 20261,543
22 Jun 20261,183
29 Jun 20261,094
6 Jul 20261,533
13 Jul 2026889
20 Jul 2026924
27 Jul 2026867
3 Aug 2026833
10 Aug 2026753
17 Aug 2026725
24 Aug 2026847
31 Aug 2026771
7 Sep 2026712
14 Sep 2026722
21 Sep 20262,272
28 Sep 202619,163
5 Oct 20263,127
12 Oct 20261,448
19 Oct 202610,365
26 Oct 202613,254
2 Nov 2026386

Weekly downloads over the last 4 weeks are 116% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Page Visits Counter - LiteScore 93 · 5,000+GA Google Analytics - Connect Google Analytics to WordPressScore 92 · 400,000+Matomo Analytics - Powerful, Privacy-First Insights for WordPressScore 92 · 100,000+Microsoft ClarityScore 91 · 200,000+Post Views CounterScore 91 · 100,000+

Facts

Version8.9
Authorosama.esh
Added24 Oct 2017
Last updated27 Oct 2026
Active installs20,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHPnot stated
CategoryAnalytics & Reporting > Traffic & Visitor Analytics
Tagsstats, insights, visitors, analytics, google analytics

Other plugins by this author: Real-Time Post Statistics for WordPress

Questions

Is WP Visitor Statistics (Real Time Traffic) still maintained?

WP Visitor Statistics (Real Time Traffic) was last updated on 27 Oct 2026. Its Canary status is Healthy.

Is WP Visitor Statistics (Real Time Traffic) safe?

WP Visitor Statistics (Real Time Traffic) has no open unpatched vulnerabilities on record. 11 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns WP Visitor Statistics (Real Time Traffic)?

The wordpress.org author is osama.esh. Recent committers: osamaesh, plugin-master. We have recorded no ownership change.

What can I use instead of WP Visitor Statistics (Real Time Traffic)?

Plugins in the same category with a higher Canary Score: Page Visits Counter - Lite, GA Google Analytics - Connect Google Analytics to WordPress, Matomo Analytics - Powerful, Privacy-First Insights for WordPress, Microsoft Clarity, Post Views Counter.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue