Koko Analytics – Privacy Friendly Statistics for WordPress

Registro de cambios

2.3.5 – May 1, 2026

• data: ensure aggregation process does not run while database migrations are pending.
• perf: aggregation process no longer invalidates alloptions cache on every run.
• perf: process database pruning in chunks of 10K rows.
• security: add nonce verification to user-initiated action to update to v2.

2.3.4 – Apr 20, 2026

• fix: access to Jetpack and Plausible importer pages.
• fix: database warning because of unexisting table on fresh installs.
• ux: table rows selectable again.
• seo: remove canonical URL from public dashboard (because it is already noindex).
• database: change default database purge treshold to 3 years (down from 5).
• dashboard: don’t listen to query string argument for public dashboard if pretty permalinks are enabled.

2.3.3 – Apr 8, 2026

• database: fix table and column value for upserting new referrer URL’s.

2.3.2 – Apr 7, 2026

• dashboard: draggable icon now only shows up when hovering table header, not table body
• database: prevent running database migrations concurrently
• database: try to increase time limit to 300s before running database migrations
• database: re-acquire and extend acquired lock after every individual database migration step

2.3.0 – Apr 7, 2026

• tracking: improved detection of preflight requests and requests from headless browsers.
• tracking: add more aggregation rules for google subdomains
• database: improved migration runner for more reliable database migrations
• database: use atomic upsert for upserting normalized string values (like paths and referrer urls).
• database: improved performance for pruning action.
• shortcode: fix koko_analytics_counter sometimes not working properly when used outside of post content.
• shortcode: format output of koko_analytics_counter shortcode according to localized number formatting rules.
• settings: restrict tab query parameter to whitelisted values only
• ux: allow a custom order of your dashboard components through drag and drop.
• ux: add direct link to page in the top pages component.
• ux: styling improvements to the dashboard.
• dev: add filter koko_analytics_print_html_comments to disable HTML comments with version info.

2.2.5 – Mar 18, 2026

• Change URL for tracking request to home_url to bypass rate limits on admin-ajax.php on some hosts. This only applies if not using the optimized endpoint.
• Format date in chart tooltip differently depending on grouping.
• Fix issue where dashboard could only fetch statistics up to 10 years back, due to pre-generated dates table.
• Prevent load_textdomain_just_in_time() warning when other plugins call wp_get_schedules() before init hook.
• Various typing improvements for issues as reported by PHPStan.

2.2.4 – Feb 17, 2026

• Fix fatal error on fresh plugin installation because of calling non-static method statically.
• Fix [koko_analytics_counter] shortcode no longer working in version 2.2.2 because of lacking function arguments.

2.2.2 – Feb 17, 2026

• Add hook koko_analytics_public_dashboard_headers, which fires before sending HTTP headers for public dashboard. This allows a password protected public dashboard in Koko Analytics Pro.
• Add hook koko_analytics_output_dashboard_settings which allows adding setting rows at any position on the dashboard settings page.
• Delete koko_analytics_last_aggregation_at option on plugin uninstall.
• Add gradient showing relative weight per row in the referrers table.
• Fix Jetpack & Plausible import pages not accessible since version 2.2.0.
• Minor performance improvements by changing code structure to re-use commonly used action hooks.

2.2.1 – Feb 02, 2026

• gutenberg: add counter block type
• tracking: add filter koko_analytics_allowed_query_vars (example)
• performance: rollup database migrations older than 5 years.

2.2.0 – Jan 21, 2026

• settings: allow plugins to register their own settings tab through the koko_analytics_settings_tabs filter.
• endpoint: remove duplicate require statements in case several plugins add the same file.

2.1.3 – Jan 12, 2026

• data export: escape path and referrer url values in data export file. Fixes a potential SQL injection vulnerability when importing a previously exported dataset containing malicious path values (CVE-2026-22850). Thanks to Hector Ruiz from naxus-audit for responsibly disclosing.
• data import: only allow SQL statements affecting the Koko Analytics database
  tables
• tracking: reject invalid path values per the RFC 2396 specification

2.1.2 – Jan 7, 2026

• tracking: accept path and post ID argument in koko_analytics.trackPageview(path, post_id) function to allow manual calls in single-page applications.
• dashboard: add group by ‘year’ option to chart

View complete changelog at https://www.kokoanalytics.com/changelog/