Changelog

• Enhancement: Hardened input handling across admin AJAX endpoints, the dynamic query builder, the referrer pipeline, and the GeoIP download URL.
• Enhancement: Removed the bundled moment.min.js in favor of the copy shipped with WordPress core.
• Enhancement: Added direct-file-access guards, switched date() calls to gmdate(), and routed parse_url() through wp_parse_url().
• Enhancement: Normalized translator placeholders and text domains; routed translated UI strings through escape/kses functions.
• Enhancement: Replaced direct unlink() calls in plugin code with wp_delete_file().

• Enhancement: Hardened escaping and sanitization in device reports.
• Enhancement: Tracking endpoints now send noindex and no-cache headers to prevent "ghost pages" in Google Search Console.
• Fix: Stopped GeoLite2-City background downloads on Cloudflare IP Geolocation sites (issue #1093).
• Fix: "Bypass Ad Blockers" no longer copies the tracker into uploads, improving compatibility with hardened hosting.
• Fix: Run Migration button stays clickable during an active migration to recover stuck queues.
• Deprecated: wp_statistics_hashed_asset_root and wp_statistics_hashed_asset_dir filters; will be removed in a future release.

• Fix: Removed legacy TinyMCE integration that caused "Failed to load plugin" errors in the classic editor, especially with themes like Corvix and Avada.
• Fix: Excluded browser prefetch and prerender requests that were inflating visit counts.
• Fix: Excluded headless browsers and automation tools (Headless Chrome, PhantomJS, Puppeteer, Playwright, Selenium) that were being counted as real visitors.

• Enhancement: Simplify WP Consent API consent level logic.
• Enhancement: Hardened plugin security and improvement
• Enhancement: Tested up to WordPress v7.0
• Fix: Fixed an issue where the download/link tracker did not respect user role exclusion settings (e.g., Administrator), causing admin downloads to be recorded despite being excluded.
• Fix: Suppressed the misleading tracker.js exclusion notice for cache plugins that don't optimize static assets (WP Super Cache, Comet Cache, Cache Enabler, WordPress Object Cache).

Changelog

• Fix: Improved permission checks on AJAX handlers for better security.
• Enhancement: Updated Device Detector library (6.4.7 → 6.5.0) with latest browser, device, and bot detection rules.
• Enhancement: Updated MaxMind DB Reader (1.12.1 → 1.13.1) and GeoIP2 libraries.

Changelog

• Fix: Minor improvements and fix version.

Changelog

• Fix: Minor improvements and fix version.

Changelog

• Fix: Fixed an issue where historical data was not included in single-content/single-resource reports.
• Fix: Improved compatibility with Bedrock when WP Statistics is placed in mu-plugins by fixing asset hashing and obfuscated tracker path resolution.
• Fix: Fixed an issue where the Page ID was not correctly updated during Interactivity API navigation and barba.js transitions.
• Fix: Prevent infinite or extremely large percentage values when no previous analytics data exists.
• Fix: Fixed the "All Time" filter showing incorrect start date in single content analytics.
• Fix: Fixed notification indicators hiding when viewing the empty Dismissed tab.
• Fix: Optimized license API caching to prevent excessive requests on multilingual sites.
• Fix: Resolved unsafe SQL calls and direct file access issues for WordPress.org compliance.
• New: Added "Total" row to the Traffic Summary widget showing all-time Visitors and Views (includes legacy historical data).
• Enhancement: Added pagination support for Category Analytics.
• Enhancement: Unified disabled premium buttons across the plugin for a consistent look.
• Enhancement: Added PHP environment configuration values (memory_limit, max_execution_time, post_max_size, upload_max_filesize) to anonymous usage data.
• Enhancement: Updated Advanced Reporting premium modal copies.
• Dev: Added wp_statistics_register_background_jobs filter to allow add-ons to register custom background processes.
• Dev: Added wp_statistics_register_data_migrations filter to allow add-ons to register custom data migration keys.
• Dev: Added wp_statistics_resolve_page_from_uri filter to allow custom page resolution from URL for SPA tracking.

Changelog

• New: Added an Export button to all report pages.
• New: Added a new Summary Totals table to store daily aggregated data.
• Enhancement: Tested up to v6.9
• Enhancement: Updated PHP requirement to v7.4 and WordPress requires to v6.6
• Enhancement: Redesigned Summary widgets across all report pages.
• Enhancement: Optimized database queries and improved overall performance.
• Enhancement: Improved online tracking system and removed heartbeat online requests for better performance and reduced server load.
• Deprecation: Removed the Matomo Referrer Spam Blacklist options from the settings.

Changelog

• New: Introduced a refactored background-process migration system and removed legacy AJAX migrations.
• New: Updated the Single Visitor page and added an "Other Visits" section.
• Enhancement: Converted the Visitor Columns migrator into a background process, added a progress notice, and introduced a "Data Migrations" section on the Optimization page.
• Enhancement: Linked 404 report items directly to the Single Resource page.
• Fix: Fixed unknown location link issue in Visitor Information.
• Fix: Resolved chart display issues with non-Gregorian dates.
• Fix: Fixed external link detection for accurate outbound tracking.
• Fix: Corrected the label displayed for selected filters on the Link Tracker page.