ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin)

google-analytics-dashboard-for-wp · by smub · wordpress.org ↗ · SVN ↗
Active installs
300k+
Current version
9.1.3
Added
2013-03-12
Last updated
2026-04-22 (9d ago)
First seen by beacon
10d ago
Total downloads
51,247,162

Alerts (0)

No open alerts.

Show 5 resolved alerts
High committer_younger_than_plugin Resolved · benign_company_employee 2026-04-27 10:32:30 (5d ago)
Sluggoogle-analytics-dashboard-for-wp
Committer slugdpaternina
Committer display nameDavid Paternina
Committer employer
Committer member since2024-06-28
Committer first commit2024-10-22 14:36:42
Committer commit count38
Plugin listed authorsmub
Earliest plugin commit2014-07-09 06:06:05
Plugin age at join days3,758
Committer age at join days116
Active installs300,000
View raw JSON
{
    "slug": "google-analytics-dashboard-for-wp",
    "committer_slug": "dpaternina",
    "committer_display_name": "David Paternina",
    "committer_employer": null,
    "committer_member_since": "2024-06-28",
    "committer_first_commit": "2024-10-22 14:36:42",
    "committer_commit_count": 38,
    "plugin_listed_author": "smub",
    "earliest_plugin_commit": "2014-07-09 06:06:05",
    "plugin_age_at_join_days": 3758,
    "committer_age_at_join_days": 116,
    "active_installs": 300000
}
High committer_younger_than_plugin Resolved · benign_company_employee 2026-04-27 10:32:30 (5d ago)
Sluggoogle-analytics-dashboard-for-wp
Committer slugmicheleam
Committer display namemicheleam
Committer employer
Committer member since2023-04-11
Committer first commit2023-04-11 16:18:34
Committer commit count33
Plugin listed authorsmub
Earliest plugin commit2014-07-09 06:06:05
Plugin age at join days3,198
Committer age at join days0
Active installs300,000
View raw JSON
{
    "slug": "google-analytics-dashboard-for-wp",
    "committer_slug": "micheleam",
    "committer_display_name": "micheleam",
    "committer_employer": null,
    "committer_member_since": "2023-04-11",
    "committer_first_commit": "2023-04-11 16:18:34",
    "committer_commit_count": 33,
    "plugin_listed_author": "smub",
    "earliest_plugin_commit": "2014-07-09 06:06:05",
    "plugin_age_at_join_days": 3198,
    "committer_age_at_join_days": 0,
    "active_installs": 300000
}
Critical code_pattern Resolved · no_longer_matches 2026-04-24 17:01:47 (7d ago)
Sluggoogle-analytics-dashboard-for-wp
Patternunserialize_after_remote_call
Kindbuiltin
Version9.1.3
Hit count2
First hit
File
includes/gutenberg/headline-tool/phpinsight/lib/PHPInsight/Sentiment.php
Line
230
Snippet
L229: $temp = file_get_contents( $fn ); → L230: $words = unserialize( trim( $temp ) );
Explanationa remote HTTP fetch (`wp_remote_*`/`curl_exec`/`file_get_contents`) is followed by `@unserialize` within the same file — classic PHP Object Injection C2 gadget used by EP and most WP supply-chain backdoors. The error-suppressed form is the tell: legit code wants to know when deserialize fails; attackers suppress so malformed gadgets do not leak.
View raw JSON
{
    "slug": "google-analytics-dashboard-for-wp",
    "pattern": "unserialize_after_remote_call",
    "kind": "builtin",
    "version": "9.1.3",
    "hit_count": 2,
    "first_hit": {
        "file": "includes/gutenberg/headline-tool/phpinsight/lib/PHPInsight/Sentiment.php",
        "line": 230,
        "snippet": "L229: $temp  = file_get_contents( $fn );  \u2192  L230: $words = unserialize( trim( $temp ) );"
    },
    "explanation": "a remote HTTP fetch (`wp_remote_*`/`curl_exec`/`file_get_contents`) is followed by `@unserialize` within the same file \u2014 classic PHP Object Injection C2 gadget used by EP and most WP supply-chain backdoors. The error-suppressed form is the tell: legit code wants to know when deserialize fails; attackers suppress so malformed gadgets do not leak."
}
Critical code_scan_delta Resolved · fp_vendored_library_local_cache 2026-04-24 16:01:17 (7d ago)
Sluggoogle-analytics-dashboard-for-wp
Previous version9.1.3
Current version9.1.3
New findings
PatternKindFileLineSnippetConfidence
unserialize_after_remote_callbuiltinincludes/gutenberg/headline-tool/phpinsight/lib/PHPInsight/Sentiment.php230L229: $temp = file_get_contents( $fn ); → L230: $words = unserialize( trim( $temp ) );high
unserialize_after_remote_callbuiltinincludes/gutenberg/headline-tool/phpinsight/lib/PHPInsight/Sentiment.php360L359: $temp = file_get_contents( $fn ); → L360: $words = unserialize( trim( $temp ) );high
New finding count2
View raw JSON
{
    "slug": "google-analytics-dashboard-for-wp",
    "previous_version": "9.1.3",
    "current_version": "9.1.3",
    "new_findings": [
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "includes/gutenberg/headline-tool/phpinsight/lib/PHPInsight/Sentiment.php",
            "line": 230,
            "snippet": "L229: $temp  = file_get_contents( $fn );  \u2192  L230: $words = unserialize( trim( $temp ) );",
            "confidence": "high"
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "includes/gutenberg/headline-tool/phpinsight/lib/PHPInsight/Sentiment.php",
            "line": 360,
            "snippet": "L359: $temp  = file_get_contents( $fn );  \u2192  L360: $words = unserialize( trim( $temp ) );",
            "confidence": "high"
        }
    ],
    "new_finding_count": 2
}
Critical domain_younger_than_plugin Resolved · no_longer_matches 2026-04-24 09:26:16 (8d ago)
Sluggoogle-analytics-dashboard-for-wp
Domainexactmetrics-translations.com
Domain sourcec2_http_call
Domain registered at2025-01-06
Plugin earliest commit2014-07-09 06:06:05
Plugin latest release2026-04-22 16:28:26
Gap days3,833
Domain age at release471
Active installs300,000
View raw JSON
{
    "slug": "google-analytics-dashboard-for-wp",
    "domain": "exactmetrics-translations.com",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2025-01-06",
    "plugin_earliest_commit": "2014-07-09 06:06:05",
    "plugin_latest_release": "2026-04-22 16:28:26",
    "gap_days": 3833,
    "domain_age_at_release": 471,
    "active_installs": 300000
}

SVN committers (6)

Accounts with actual commit access to google-analytics-dashboard-for-wp on plugins.svn.wordpress.org, reconstructed from svn log. This is the list that matters for ownership changes — not the readme contributors.

Committer Member since Commits First commit Latest commit
Alin Marcu 2012-01-30 297 2014-07-09 · r945400 2018-03-25 · r1846572
chriscct7 2012-09-28 67 2018-05-09 · r1871491 2023-05-02 · r2907136
David Paternina 2024-06-28 38 2024-10-22 · r3173738 2026-04-22 · r3513041
Mohit Aneja Young account 2021-11-11 38 2022-01-24 · r2663690 2023-05-02 · r2907112
micheleam Young account 2023-04-11 33 2023-04-11 · r2897321 2024-09-19 · r3154681
Mircea Sandu 2010-01-31 24 2020-11-03 · r2411867 2021-07-13 · r2563500

Readme contributors (2)

Names the plugin's readme declares as contributors. A soft signal — anyone can be listed. The SVN access column is the ground-truth cross-reference: does this contributor actually commit code?

Contributor Member since SVN access Status
chriscct7 2012-09-28 67 commits Active
Syed Balkhi 2008-06-22 Active

Versions (92 most recent)

Version Released Download
9.1.3 2026-04-22 · 9d ago
9.1.2 2026-03-31 · 1mo ago zip
9.1.1 2026-03-25 · 1mo ago zip
9.1.0 2026-03-17 · 1mo ago zip
9.0.3 2026-03-03 · 1mo ago zip
9.0.2 2026-02-10 · 2mo ago zip
9.0.1 2026-02-05 · 2mo ago zip
9.0.0 2026-02-04 · 2mo ago zip
8.11.1 2026-01-06 · 3mo ago zip
8.11.0 2025-12-17 · 4mo ago zip
8.10.2 2025-12-09 · 4mo ago zip
8.10.1 2025-11-14 · 5mo ago zip
8.10.0 2025-11-13 · 5mo ago zip
8.9.0 2025-10-14 · 6mo ago zip
8.8.0 2025-09-09 · 7mo ago zip
8.7.4 2025-08-07 · 8mo ago zip
8.7.3 2025-08-06 · 8mo ago zip
8.7.2 2025-08-06 · 8mo ago zip
8.7.1 2025-07-22 · 9mo ago zip
8.7.0 2025-07-22 · 9mo ago zip
8.6.2 2025-06-26 · 10mo ago zip
8.6.1 2025-06-12 · 10mo ago zip
8.6.0 2025-06-11 · 10mo ago zip
8.5.3 2025-05-14 · 11mo ago zip
8.5.0 2025-04-29 · 1y ago zip
8.4.1 2025-03-27 · 1y ago zip
8.4.0 2025-03-24 · 1y ago zip
8.3.2 2025-03-11 · 1y ago zip
8.3.1 2025-01-16 · 1y ago zip
8.3.0 2025-01-15 · 1y ago zip
8.2.4 2024-12-13 · 1y ago zip
8.2.3 2024-12-10 · 1y ago zip
8.2.2 2024-11-12 · 1y ago zip
8.2.1 2024-10-31 · 1y ago zip
8.2.0 2024-10-22 · 1y ago zip
8.1.0 2024-09-19 · 1y ago zip
8.0.1 2024-08-21 · 1y ago zip
8.0.0 2024-07-25 · 1y ago zip
7.28.0 2024-07-08 · 1y ago zip
7.27.0 2024-05-29 · 1y ago zip
7.26.0 2024-04-15 · 2y ago zip
7.25.0 2024-03-05 · 2y ago zip
7.24.4 2024-02-21 · 2y ago zip
7.24.3 2024-02-16 · 2y ago zip
7.24.2 2024-02-15 · 2y ago zip
7.24.1 2024-02-12 · 2y ago zip
7.24.0 2024-02-08 · 2y ago zip
7.23.1 2023-12-18 · 2y ago zip
7.23.0 2023-12-14 · 2y ago zip
7.22.0 2023-11-29 · 2y ago zip
7.21.0 2023-11-13 · 2y ago zip
7.20.1 2023-10-09 · 2y ago zip
7.20.0 2023-10-02 · 2y ago zip
7.19.0 2023-08-22 · 2y ago zip
7.18.1 2023-07-24 · 2y ago zip
7.18 2023-07-20 · 2y ago zip
7.17 2023-06-29 · 2y ago zip
7.16 2023-06-15 · 2y ago zip
7.15.3 2023-05-22 · 2y ago zip
7.15.2 2023-05-03 · 2y ago zip
7.15.1 2023-05-02 · 3y ago zip
7.15 2023-05-02 · 3y ago zip
7.14.2 2023-04-11 · 3y ago zip
7.14.1 2023-03-29 · 3y ago zip
7.14.0 2023-03-27 · 3y ago zip
7.13.1 2023-03-21 · 3y ago zip
7.13.0 2023-03-13 · 3y ago zip
7.12.1 2023-01-12 · 3y ago zip
7.12.0 2023-01-12 · 3y ago zip
7.11.0 2023-01-12 · 3y ago zip
7.10.1 2022-11-09 · 3y ago zip
7.10.0 2022-11-07 · 3y ago zip
7.9.1 2022-10-11 · 3y ago zip
7.9.0 2022-09-20 · 3y ago zip
7.8.2 2022-08-26 · 3y ago zip
7.8.1 2022-08-24 · 3y ago zip
7.8.0 2022-08-22 · 3y ago zip
7.7.0 2022-07-11 · 3y ago zip
7.6.0 2022-06-13 · 3y ago zip
7.5.3 2022-05-27 · 3y ago zip
7.5.2 2022-05-07 · 3y ago zip
7.5.1 2022-05-03 · 3y ago zip
7.5.0 2022-04-19 · 4y ago zip
7.4.0 2022-02-28 · 4y ago zip
7.3.4 2022-02-10 · 4y ago zip
7.3.3 2022-02-09 · 4y ago zip
7.3.2 2022-01-25 · 4y ago zip
7.3.1 2022-01-24 · 4y ago zip
7.3.0 2021-12-14 · 4y ago zip
7.2.0 2021-11-03 · 4y ago zip
7.2.1 2021-11-03 · 4y ago zip
7.1.0 2021-09-29 · 4y ago zip