PLUGIN SECURITY
Is Metricool safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Metricool WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
metricool - Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
- CVE-2022-4299 — Metricool – Social media and site statistics [metricool] < 1.18 (XSS) · Medium
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Safer / more established alternatives
- Site Kit by Google – Analytics, Search Console, AdSense, Speed — 5000000+ active installs
- MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) — 2000000+ active installs — max PHP 8.4
- WP Statistics – Simple, privacy-friendly Google Analytics alternative — 600000+ active installs — max PHP <8.0
- GA Google Analytics – Connect Google Analytics to WordPress — 400000+ active installs — max PHP 8.4
- Meta for WooCommerce — 400000+ active installs — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.