NewStatPress

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 64% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. A declining trend compresses what a buyer would pay.

1. ★★★★★ songdove

   2.6y ago

   A year ago I asked how to block unusable search data from being reported in my stats. I never got an answer. Today, most if not almost all stats are from this unusable search data, not from actual pages or posts on my site! I used to get around this by exporting the data and importing into a spreadsheet, deleting the unusable stuff and then doing my Best Of previous year blog post. This year however, any export only shows me the header row and no data, despite the “informations” tab of “options” showing me quite a bit of data in the database, if numbers are to be believed. Not happy. I like doing a best-of blog post at the start of each year and can’t do it now.

   Read on wp.org ↗
2. ★★★★★ alecoss

   3.7y ago

   Perfetto per la maggior parte delle funzioni, aggiornato di frequente e leggero.

   Read on wp.org ↗
3. ★★★★★ Senri Miura

   4.0y ago

   I’ve been using this plugin for several years now. It would be nice to be able to display the stats in a sidebar widget. WP Slimstat can’t do that. The drawback is that the statistic DB becomes large and overhead is generated, but I can’t do what I want to do without this plugin, so I continue to use it.

   Read on wp.org ↗
4. ★★★★★ uninvolved

   4.6y ago

   The numbers in the overview are sometimes gibberish, having no bearing on reality. But, the daily visitors are accurate. They are fairly close to what I see in AwStats (which is greatly improved lately) and in my raw server logs when processed to remove bots and whatnot. The numbers are close enough to save that effort and just accept these results as being useful.

   Read on wp.org ↗
5. ★★★★★ tikimob

   5.1y ago

   Plugin génial pour avoir des infos sur les visites fiables

   Read on wp.org ↗
6. ★★★★★ wp-muhkiainen

   7.7y ago

   I have used this plugin over five years, and it is near perfection. Only thing with long time use is that database grows quite big. A quick help for that is to clean bot, spider and other non-human databases. .. 🙂

   Read on wp.org ↗
7. ★★★★★ bukovinsky

   7.8y ago

   :-*)

   Read on wp.org ↗
8. ★★★★★ John

   7.9y ago

   Works nicely and highly configurable, thanks!

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.4.5 Released date: 2026-07-07 Fix vulnerability Unauthenticated Stored Cross-Site Scripting in TopPosts widget (thanks to ApogeeBytes for the report) 1.4.5
2. — Version 1.4.4 Released date: 2026-01-06 Fix vulnerability Authenticated (Contributor+) Stored Cross-Site Scripting Fix php8 specific error Rewrote all to be aligned with check plugin (so check the changes on syntax for variables) 1.4.4
3. — Version 1.4.3 Released date: 2022-06-26 Browsers (+20) Upgrade Hungarian language (thanks to Pile) Fix filemtime() in ip2nation 1.4.3
4. — Version 1.4.2 Released date: 2021-03-21 Complete search Add html contropart for widget 1.4.2
5. — Version 1.4.1 Released date: 2021-03-12 Fix os/browser detection Fix update missing action 1.4.1
6. — Version 1.4.0 Released date: 2021-03-09 More sanification (complete core rewrite: actually search function is not working) Fix email sent Fix top post widget error 1.4.0

11 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.2 NewStatPress < 1.4.5 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-08-04 CVE-2026-14845 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.4.5 Patched in 1.4.5
2. Medium · 6.4 NewStatPress <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-12-11 CVE-2025-13747 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.4.3 Patched in 1.4.4
3. Medium · 6.1 NewStatPress <= 1.3.5 - Reflected Cross-Site Scripting ↗
   2022-01-13 CVE-2022-0206 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.3.6 Patched in 1.3.6
4. High · 7.2 NewStatPress < 1.2.5 - Unauthenticated Stored Cross-Site Scripting ↗
   2017-03-01 CVE-2017-18575 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.2.5 Patched in 1.2.5
5. Critical · 9.8 NewStatPress < 1.0.6 - SQL Injection ↗
   2015-07-07 CVE-2015-9313 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 1.0.6 Patched in 1.0.6
6. Medium · 6.1 NewStatPress < 1.0.6 - Reflected Cross-Site Scripting ↗
   2015-07-07 CVE-2015-9312 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.0.6 Patched in 1.0.6
7. High · 7.2 NewStatPress <= 1.0.3 - Stored Cross-Site Scripting ↗
   2015-06-30 CVE-2015-9314 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.0.3 Patched in 1.0.4
8. Medium · 6.1 NewStatPress <= 1.0.6 - Reflected Cross-Site Scripting ↗
   2015-06-25 CVE-2015-9311 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.0.6 Patched in 1.0.7
9. Critical · 9.8 NewStatPress <= 1.0.0 - SQL Injection ↗
   2015-06-08 CVE-2015-9315 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.0.0 Patched in 1.0.1
10. High · 8.8 NewStatPress <= 0.9.8 - Authenticated SQL Injection ↗
    2015-05-25 CVE-2015-4062 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 0.9.8 Patched in 0.9.9
11. Medium · 5.4 NewStatPress <= 0.9.8 - Authenticated Cross-Site Scripting ↗
    2015-05-25 CVE-2015-4063 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 0.9.8 Patched in 0.9.9

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 129 languages, 1 at 90% or more

Plus 105 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-04-30 9K+ → 8K+ down after 149 days in tier
2. 2025-12-02 10K+ → 9K+ down after 1061 days in tier
3. 2023-01-06 20K+ → 10K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• GA Google Analytics – Connect Google Analytics to WordPress 400K+ installs · 4.8★ · 3 shared tags A
• SlimStat Analytics 70K+ installs · 4.8★ · 3 shared tags A
• Connect Matomo – Analytics Dashboard for WordPress 60K+ installs · 4.4★ · 3 shared tags A
• Better Google Analytics 2K+ installs · 4.1★ · 3 shared tags D
• Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative) 200K+ installs · 4.8★ · 2 shared tags A
• Post Views Counter 200K+ installs · 4.9★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for NewStatPress into a readme, a review or a deck. It updates itself.

NewStatPress: 8K+ active installs, 4.7★ (84 reviews). Plugin Pulse (WP Mayor), as of 2026-08-28. https://plugins.wpmayor.com/plugin/newstatpress