WP Visitor Statistics (Real Time Traffic)

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 44% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ janemperador

   5mo ago

   Thanks a lot!

   Read on wp.org ↗
2. ★★★★★ christian73

   5mo ago

   Bonjour, J’ai mis en place vos statistiques qui me conviennent bien ..

   Read on wp.org ↗
3. ★★★★★ Gundolfsbibliothek

   7mo ago

   Habe mir das Plugin zur Kontrolle des Traffics heruntergeladen und finde es einfach toll! Danke für dieses Plugin!

   Read on wp.org ↗
4. ★★★★★ Kurt Gustafsson

   7mo ago

   Good program

   Read on wp.org ↗
5. ★★★★★ endmost

   8mo ago

   Plugin works very well!

   Read on wp.org ↗
6. ★★★★★ listlist

   8mo ago

   Пользуюсь бесплатным тарифом – мне хватает. Ошибок нет. Совпадает почти тютю в тютю. Может даже Яндекс.Метрика врет. Но все отлично. Рекомендую. Хороший плагин! Спасибо зразработчикам

   Read on wp.org ↗
7. ★★★★★ waterdust

   9mo ago

   k

   Read on wp.org ↗
8. ★★★★★ jybyky

   10mo ago

   Plugins help in statistics and support website development.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 8.2 Updated the data type of some database columns to fix the Out of range value for column ‘id’ 8.2
2. — Version 8.1 Updated the data type of the id column from TINYINT(2) UNSIGNED to INT UNSIGNED to support more than 255 records per table. 8.1
3. — Version 7.9 Bug Fixing: vulnerable to Cross Site Scripting (XSS) 7.9
4. — Version 7.8 Solve error in wsm_db.php file Add timezone notation Check IPV4/IPV6 Exclusion improvements 7.8
5. — Version 7.7 Nonce check, IP validation, security improvements 7.7
6. — Version 7.6 Exclude both IPv4 and IPv6. 7.6

14 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.4 WP Visitor Statistics (Real Time Traffic) <= 8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height' Shortcode Attribute ↗
   2026-04-07 CVE-2026-4303 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 8.4 Patched in 8.5
2. Medium · 6.4 Visitor Statistics (Real Time Traffic) <= 8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-12-15 CVE-2025-67983 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 8.3 Patched in 8.4
3. Medium · 6.4 WP Visitor Statistics (Real Time Traffic) <= 8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-08-20 CVE-2025-49400 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 8.2 Patched in 8.3
4. Medium · 6.4 WP Visitor Statistics (Real Time Traffic) <= 7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-07-03 CVE-2025-53566 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 7.8 Patched in 7.9
5. Medium · 5.3 WP Visitor Statistics (Real Time Traffic) <= 8.4 - Missing Authorization ↗
   2025-06-19 CVE-2025-49996 Missing Authorization Affects <= 8.4 Patched in 8.5
6. Medium · 6.4 WP Visitor Statistics (Real Time Traffic) <= 7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-01-24 CVE-2025-24675 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 7.2 Patched in 7.3
7. Medium · 4.3 WP Visitor Statistics (Real Time Traffic) <= 7.5 - Missing Authorization ↗
   2025-01-06 CVE-2025-22304 Missing Authorization Affects <= 7.5 Patched in 7.6
8. Medium · 5.3 WP Visitor Statistics (Real Time Traffic) <= 6.9.4 - Sensitive Information Exposure via Log File ↗
   2024-02-02 CVE-2024-24867 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 6.9.4 Patched in 6.9.5
9. Critical · 9.8 WP Visitor Statistics (Real Time Traffic) <= 6.8.1 - Unauthenticated SQL Injection ↗
   2023-04-24 CVE-2023-0600 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 6.8.1 Patched in 6.9
10. Medium · 6.4 WP Visitor Statistics (Real Time Traffic) <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
    2023-01-17 CVE-2022-4656 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 6.4 Patched in 6.5
11. Critical · 9.8 WP Visitor Statistics (Real Time Traffic) <= 5.7 - Unauthenticated SQL Injection ↗
    2022-07-06 CVE-2022-33965 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 5.7 Patched in 5.8
12. High · 8.8 WP Visitor Statistics (Real Time Traffic) <= 5.5 - SQL Injection ↗
    2022-02-14 CVE-2022-0410 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 5.6 Patched in 5.6
13. Medium · 5.4 WP Visitor Statistics (Real Time Traffic) <= 5.4 - Missing Authorization to Stored Cross-Site Scripting ↗
    2022-01-31 CVE-2021-25042 Missing Authorization Affects <= 5.4 Patched in 5.5
14. High · 8.8 WP Visitor Statistics (Real Time Traffic) <= 4.7 - SQL Injection ↗
    2021-12-22 CVE-2021-24750 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 4.8 Patched in 4.8

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 3 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-03-04 30K+ → 20K+ down after 1 days in tier
2. 2026-03-03 20K+ → 30K+ up after 3 days in tier
3. 2026-02-28 30K+ → 20K+ down after 3 days in tier
4. 2026-02-25 20K+ → 30K+ up after 1 days in tier
5. 2026-02-24 30K+ → 20K+ down after 606 days in tier
6. 2024-06-28 20K+ → 30K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• WP Statistics – Simple, privacy-friendly Google Analytics alternative 600K+ installs · 4.1★ · 4 shared tags A
• Fathom Analytics for WP 10K+ installs · 4.5★ · 3 shared tags B
• Global Site Tag Tracking 1K+ installs · 3.8★ · 3 shared tags D
• MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) 2M+ installs · 4.5★ · 2 shared tags A
• GA Google Analytics – Connect Google Analytics to WordPress 400K+ installs · 4.8★ · 2 shared tags A
• ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) 300K+ installs · 2.5★ · 2 shared tags B

Embed this report card

Drop a live Pulse card for WP Visitor Statistics (Real Time Traffic) into a readme, a review or a deck. It updates itself.

WP Visitor Statistics (Real Time Traffic): 20K+ active installs, 4.5★ (156 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/wp-stats-manager