Active installations100Adoption metric — not a quality score
WordPress.org ratingNo WordPress.org ratings yet
Official packageDirect from WordPress.org
Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →
WP PlugIndex currently records VisitStats version 1.1.6 as active, updated 5mo ago and tested up to WordPress 7.0.
Overview
About this plugin
VisitStats is a lightweight, privacy-first analytics plugin for WordPress. All your data stays in your own WordPress database — we never see it, no third party sees it.
Why VisitStats?
No cookies, no consent banner needed. Tracking is GDPR-friendly by default.
Self-hosted. All data lives in your WordPress database. No external service, no Automattic, no Google.
Lightweight. Frontend tracker is under 2KB. Loads asynchronously. Won’t slow your site.
Zero setup. Install, activate, done. No theme edits, no tag manager, no JS snippets.
Built for WordPress. Reports appear inside your WordPress dashboard — no separate app to log into.
Recommended for sites with up to ~10,000 daily pageviews (around 95% of WordPress sites). For very high-traffic sites, consider dedicated analytics services.
What you get (all free, all the time):
Real-time visitor count — see who’s on your site right now
Pageviews, unique visitors, sessions
Top pages
Top traffic sources (direct, search, social, AI, referral)
Top referrers — actual URLs sending you traffic
Device breakdown (desktop, mobile, tablet)
Browser & operating system detection
Configurable data retention from 1 day up to 1 year
Date range views: today, 7 days, 30 days, 90 days, 1 year
Engagement signals (scroll depth, time on page)
Cookieless visitor identification using daily-rotating salt + SHA-256 hashing
Bot filtering with built-in bot signature detection
Optional administrator / logged-in user exclusion
Honors Do Not Track browser signal
Automatic data pruning to keep your database lean
Rate-limited tracking endpoint protects against abuse
IP anonymization before hashing — actual IPs never stored
Privacy by design
VisitStats never:
Sets cookies
Stores IP addresses
Sends data to third parties
Fingerprints visitors
Tracks across days
Visitor identification uses a daily-rotating salt hashed with the (anonymized) IP and User Agent to count unique visits within a 24-hour window. The salt regenerates every 24 hours, making cross-day tracking impossible. This is the same approach used by Plausible Analytics and Fathom Analytics.
For developers
Clean REST API at /wp-json/visitstats/v1/
Filter hooks for customizing behavior (rate limiting, bot detection, etc.)
PSR-style class organization
No external dependencies — pure WordPress core
WordPress.org metadata
Plugin tags
Topics listed for this plugin in the WordPress.org directory.
analytics
cookieless
gdpr
privacy
statistics
Compatibility & maintenance
Compatibility & maintenance
Tested up to WordPress 7.0
Not yet marked as tested with WordPress 7.1. WordPress.org currently lists Tested up to 7.0.
Current WordPress releaseWordPress 7.1
WordPress.org Tested up to7.0
Minimum requirementsWordPress 6.2 · PHP 7.4
Update activity26 May 20265mo ago
“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.
Changes recorded by WP PlugIndex
Recent tracked changes
No tracked version or compatibility changes have been recorded by WP PlugIndex yet.
Tracking & source
WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.
