Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative)

Ändringslogg

3.6.3

• August 19th 2026
• New: tracking health monitoring: a daily check verifies that tracking still works; when a drop is detected, Burst collects diagnostics (security plugins blocking the REST API, .htaccess rules, consent plugins, endpoint reachability and recent plugin or setting changes) and emails the site administrator at most once per week.
• New: community benchmarks: with anonymous data sharing enabled, the dashboard compares your visitors, bounce rate, session duration, time on page and device split against anonymized community averages, including your percentile rank.
• New: visibility goals for all Gutenberg block types, smarter goal trigger selection for third-party button, link and CTA blocks, and a new burst_clickable_blocks filter for custom block support.
• New: pinned filters: pin your preferred dashboard filters as personal defaults.
• New: added an ”Unknown” location type to the Locations datatable, and continent grouping now falls back to a country’s continent when the raw continent code is missing.
• New: diagnostic logging for the Search Console integration, visible in Site Health, with sensitive values redacted and a 90-day retention.
• New: beta features setting to try out upcoming features early.
• Improvement: reduced query overhead for the pageviews and count metrics.
• Improvement: the Reading Engagement score is now calculated as a single weighted score based on estimated reading time, instead of exposing separate raw metrics.
• Improvement: mobile and responsive layout improvements for the reporting dashboard and the email report wizard.
• Improvement: the GeoIP Country database now refreshes monthly.
• Improvement: GeoIP database downloads are verified with a SHA-256 integrity check, skipped entirely when the remote database is unchanged, and retried with increasing backoff after failures.
• Improvement: moved feature toggles from Settings to a dedicated Features menu.
• Improvement: removed filter types that could no longer be created.
• Security: share-link viewers restricted to specific dashboard tabs could read data from non-shared tabs via the admin-ajax REST fallback, because the request body could override the requested route after authorization had run; authorization now runs against the final dispatched route, with independent permission checks in the underlying handlers as defense-in-depth, props Dipak Panchal.
• Security: hardened the public tracking endpoint against resource exhaustion: lookup values are resolved with targeted queries and unique indexes instead of loading entire lookup tables into memory, browser versions are normalized to a bounded set, and the number of completed goals per hit is capped, props Gaurang Maheta.
• Security: the Site Health debug report now redacts Search Console tokens and filters server variables through an allowlist.
• Fix: the burst_uid cookie is no longer created before statistics consent has been given via the WP Consent API.
• Fix: blocks marked as a Burst goal no longer cause attribute errors during server-side rendering in the block editor.
• Fix: the dashboard could become unclickable when an ad blocker or a missing stylesheet left an invisible dialog’s scroll lock active; stuck scroll locks are now detected and released.
• Fix: capturing on-site search terms no longer causes a fatal error when a third-party plugin filters search results to a non-array value.
• Fix: the low-traffic auto-update filter no longer fatals when called with an unexpected update item type.
• Fix: resolved datatable overlay display issues, an overlap with ad blocker elements, and normalized z-index layering across the dashboard.

3.6.2

• July 21st 2026
• New: 404 tracking: hits on not-found pages are now tracked and shown in a new 404 pages block on the Engagement tab, while regular statistics exclude 404 hits.
• Improvement: database upgrades are now protected by an atomic upgrade lock, so concurrent requests can no longer run the same upgrade twice and fill debug.log with duplicate column warnings.
• Improvement: plugin icons on the Integrations page are only requested for plugins hosted on WordPress.org, preventing failed icon requests for premium integrations.
• Fix: with Ghost mode and combined scripts enabled, the tracking script could be silently dropped when the obfuscated filename was missing; script generation is now consistent, including improved e-commerce handling.
• Fix: enabling the headless setup now correctly enables and generates the combined tracking script file.
• Fix: date labels could show the wrong day in some time zones due to UTC parsing of date-only values.
• Fix: the insights graph falls back to automatic grouping when the selected date range is too small for the chosen interval.
• Fix: license activation links pointed to an incorrect settings URL.
• Fix: database query error on statistics.status when upgrading from versions before 3.6.1 due to missing column migration.
• Fix: salt generation on endpoint causing fatal error due to missing function.

3.6.1

• July 14th 2026
• New: Google Search Console integration: connect your Google account on the new Integrations settings page to see your top Google search queries in a new statistics block.
• New: Gutenberg support for goals: mark buttons, images and navigation links as a goal directly in the block editor, including a metadata migration for block goal/page linkage.
• New: privacy level setting to choose how Burst recognizes visitors (cookie, private mode or device fingerprint), with a matching onboarding step.
• New: use the country reported by edge/CDN headers as a fallback for country detection, props @knofte.
• Improvement: increased the goal limit from one to three goals.
• Improvement: inline search filtering in the Goals Overview dropdown.
• Improvement: filter out spam and injection probes from on-site search terms.
• Improvement: the monthly search-terms cleanup now only removes terms without results whose single occurrence is older than a month.
• Improvement: added an explanation for the automatically created burst_viewer user, and excluded it from user queries and author archives.
• Security: share-link authorization now resolves the endpoint from the dispatched REST route, so it cannot desync from the executed route via request parameters.
• Security: improved escaping in email report tables and removed duplicate escaping.
• Fix: leave non-filesystem session save paths (Redis, memcached) untouched instead of falling back to the uploads directory, props @knofte.

3.6.0.1

• July 2nd 2026
• Fix: cleaned up an unused Pro-only setting that remained on some free installs. This had no effect on tracking.

3.6.0

• July 1st 2026
• New: country-level geolocation (GeoIP country tracking).
• New: WordPress Search Terms block: see what your visitors are looking for on your site.
• New: ”All goals” option in the dashboard Goals block.
• New: AI Chat model selector: select your preferred model.
• New: WP Consent API notice task that detects whether the Consent API is active.
• Improvement: redesigned, unified tooltips with theme-consistent styling, high-contrast borders and improved readability.
• Improvement: rows-per-page selection is now persisted per datatable.
• Improvement: query and database performance improvements.
• Improvement: updated bundled libraries.
• Fix: prevent errors caused by the external link tracking class loading on the free plugin, props @dragon013.
• Fix: check open_basedir restrictions on the session save path to prevent warnings, props @jstark55.
• Fix: date picker and Reading Engagement UI layout, stacking, overflow and scroll-lock issues on mobile and tablet.
• Fix: browser detection cleanup.
• Fix: stricter match on AI plugins in REST API optimizer to prevent loading plugins only based on ’ai’ string in slug, props @nicolas-cuny.
• Fix: first hit is no longer missed when Ghost mode and Turbo mode are combined.

3.5.1

• June 17th 2026
• New: Reading Engagement statistics block.
• New: Pro forms tracking.
• New: Custom CSS block.
• Improvement: store product IDs as integers in the ecommerce cart and order tables for smaller, faster joins.
• Improvement: use native date types and right-sized columns for the report tables.
• Improvement: removed duplicate database indexes on the subscription, orders and report tables to speed up inserts and updates.
• Improvement: added outgoing links, search terms, and forms to the Abilities API.
• Improvement: query data performance and accuracy improvements.
• Improvement: overwrite the free plugin’s tracking script with the premium version during upgrade.
• Improvement: more robust report email delivery.
• Fix: container queries and various UI/UX improvements.
• Fix: mobile responsiveness for the funnel.
• Fix: report localization, adding locale handling in report configuration and formatting.
• Fix: use ISO-8601 weekday numbers so report scheduling does not break on other locales.
• Fix: generalize the GeoIP database type check to support commercial GeoIP2-City databases without triggering mismatch overwrites.

3.5.0

• 3 juni 2026
• Förbättring: tillgänglighetskontroller och registrering av förmågor för AI-chatten, vilket förhindrar PHP-notiser och dubblerade förmågsregistreringar.
• Fix: AI Chat integration with AI plugin.
• Fix: missing GROUP BY in a statistics query.

3.4.3

• 20 maj 2026
• Fix: AI chat enablement and MainWP integration reminder tasks can now be dismissed permanently.
• Fix: AI chat assistant is now hidden for users without the manage_burst_statistics capability.
• Fix: modal position calculation in the shared viewer.
• Fix: scope application password auth probing to Burst REST endpoints, so authentication on unrelated REST routes (e.g. WooCommerce) is no longer affected.
• Säkerhet: förstärkt REST API-optimerare. Tack till Sanjay Singh Jhala.
• Förbättring: prestanda för bakgrundsuppbyggnad av aggregerad tabell, tidsgränsskydd för SQL-frågor samt ytterligare index på tabellen burst_statistics.
• Förbättring: aktiveringsuppgiften för AI-chatten länkar nu till installationsguiden ”Fråga Burst vad som helst”.

3.4.2

• 12 maj 2026
• New: AI chat integration via the WordPress Abilities API, including granular datatable abilities with metric allow-listing for pages, parameters, referrers, countries, campaigns, sales and subscription products.
• New: granular datatable REST endpoints (data/datatable/{id} and data/ecommerce/datatable/{id}) so the dashboard and AI abilities can request a specific table by id.
• Förbättring: Share-klassen har delats upp i dedikerade tjänster – Share_Tokens, Share_Routing, Share_Auth och Share_UI – för tydligare ansvarsfördelning och enklare underhåll.
• Improvement: dark mode initialization respects an explicit ”light” preference so users on a dark OS no longer briefly see a dark skeleton when they have forced light mode.
• Förbättring: uppgraderingsrutinen korrigerar den lagrade aktiveringstiden för webbplatser med äldre data.
• Förbättring: ersätter inbyggda kryssrutor med Radix-kryssrutor i delningsdialogrutan för enhetlig stil.
• Improvement: shared-link capability checks now reflect the currently requested dashboard tab instead of a single cached value, so per-tab permissions are enforced correctly during batch REST requests.
• Fix: dashboard route returns a 404 when the user is not allowed to load it, instead of rendering an empty page.
• Säkerhet: begränsar statistikåtkomst via delade länkar. Tack till Sanjay Singh Jhala.
• Säkerhet: REST API-optimeraren matchar nu Burst-namnrymden strikt mot URL-sökvägen (förankrad vid burst/v1). Tack till Sanjay Singh Jhala.
• Security: harden MainWP proxy authentication. Props Sanjay Singh Jhala, Chloe Chamberland & PRISM – Wordfence
• Säkerhet: Auto Installer kräver nu behörigheten install_plugins istället för activate_plugins och accepterar endast nedladdnings-URL:er från officiella Burst-värdar. Tack till Sanjay Singh Jhala.

3.4.1.1

• 5 maj 2026
• Fix: CSS styling regression due to obsolete javascript files being included in the dashboard build.

3.4.1

• 29 april 2026
• New: automated tests for subscription statistics dashboard.
• New: abilities API integration.
• Improvement: move plugin activation logic to bootstrap class.
• Förbättring: delar upp ajax-reservlogiken i do_action och get_action.
• Fix: broken upgrade url in report settings.
• Fix: When both Story report and share links are generated, the UX could generate an error.
• Security: increase minimum required capability from view to manage in get_posts endpoint, Props Sanjay Singh Jhala.
• Säkerhet: förstärkt proxyautentisering för MainWP och CORS-ursprungsvalidering. Tack till Sanjay Singh Jhala.

3.4.0

• 22 april 2026
• New: dark mode support for the Burst Statistics dashboard.
• Nytt: stöd för MainWP-integration.
• Nytt: datumintervallet ”Hela perioden” för val i datumväljaren.
• New: support for application passwords. It is now possible to use the Burst Rest API endpoints with application passwords.
• Improvement: add detection for ad blockers. If an ad blocker breaks the Burst dashboard, show a warning about this.
• Förbättring: PHP-varning om att hänvisartabellen inte finns när tabellen rensas.
• Fix: restore bounces filter, allowing overriding the default time used to decide if a visit is a bounce.
• Fix: fixed a bug in the visitor calculation for referrers, caused by changes for the ”exclude” option in filters, props @bikew1se.
• Fix: Share links sessions are now cleaned up daily, to prevent extended access to the link for longer than the set expiration time, Props Sanjay Singh Jhala.
• Security: ajax fallback for get_reports endpoint unintentionally allowed users with burst_view capability to see reports configuration, props Sanjay Singh Jhala.

3.3.0

• 1 april 2026
• Nytt: filter för tid per session, som möjliggör filtrering efter besöksvaraktighet.
• Nytt: Stöd för mörkt läge i e-postrapporter.
• Förbättring: Flytta kolumner från statistik till sessionstabellen, vilket minskar datalagring och förbättrar sökprestanda.
• Förbättring: Sessionsdata inkluderas i arkiverade CSV-exporter.
• Förbättring: Lägg till saknade databasindex för bättre prestanda.
• Säkerhet: De som har delningslänken kunde se rapportdata (mottagarnas e-postadresser, schemaläggningskonfiguration). Tack till Sanjay Singh Jhala.
• Säkerhet: De som hade delningslänken kunde se e-handels-/försäljningsdata, även när delningslänken bara var avsedd för flikar utan försäljning. Tack till Sanjay Singh Jhala.
• Fix: Insights chart grouping by month was incorrect.
• Fix: Cron URL protocol mismatch could cause a http link to be included in the email report, even when the site url is https..
• Fix: Filter type issue breaking the filtering on the devices block, props Andrew.
• Fix: Duplicate key error in SQL hash update query.
• Fix: Email report logo centering and dark mode styling.
• Fix: A burst test hit could be used to bypass the built-in IP block, props Sanjay Singh Jhala.

3.2.3

• 12 mars 2026
• Fix: share link for non logged in users not loading page.

3.2.1

• 9 mars 2026
• Security fix: Fixed a missing authorization check that allowed users with Burst View privilege to manage reports. Props Sanjay Singh Jhala.
• Förbättring: sätt turbo som standard till aktiverad, och lägg till en notis för att rekommendera att aktivera den när cookieless-spårning är aktiverad.
• Förbättring: kolla om PharData-klassen är installerad på servern för att undvika allvarliga fel.
• Fix: Store scheme for usage during cron jobs. During cron, the site_url is http. For the javascript generation, we need it to reflect the actual scheme, usually https.
• Fix: duplicate fields in the reporting settings when the share link is opened by an admin user.
• Fix: url not found warning when classic premium report is generated.
• Fix: too strict use of sanitizers causing table prefixes to get lowercase. props @parkentosh

3.2.0

• 25 februari 2026
• Nytt: dela data anonymt för att hjälpa oss förbättra Burst Statistics: skapa branschstandarder, riktad funktionsutveckling och prestandaförbättringar.
• Nytt: lägg till meddelande om Discord, som bjuder in användare att gå med i vår Discord-server.
• New: Easily share statistics with your team or clients, with the share button in the Burst Statistics dashboard.
• Fix: catch non json encoded data in Rest API tracking, props @rajkumarreddyv
• Fix: Bounce and bounce rate calculations now correctly count distinct bounced sessions instead of summing bounce flags, preventing inflated numbers.
• Fix: default value logic for ’merge variables and scripts’ made it impossible to disable the setting.

3.1.6

• 20 januari 2026
• Fix: deleting old data in archive functionality not working due to incorrect SQL syntax.
• Fix: Not filtering browser/OS data by device on the insights block, props @alisontaylorbc.
• Förbättring: lägg till automatiserat test för borttagning av data.
• Förbättring: lägg till beständig sortering i datatabellblocket, tack till @ankush.
• Förbättring: filtrering efter kontinent.

3.1.5

• 7 januari 2026
• Förbättring: stäng meddelanden automatiskt i nedre högra hörnet av skärmen.
• Förbättring: några mindre förbättringar för mobilanpassning.
• Förbättring: utöka automatiserade tester med test för livebesökare.
• Förbättring: brytning av långa URL:er i vyn för livebesökare.
• Förbättring: utökad PHPCS-täckning.
• Fix: when the browser’s local storage is full, adding filters could cause an error.
• Fix: enforce https on combined variables and scripts URL, to prevent mixed content warnings.
• Fix: onboarding for RTL languages tried to load non existing RTL CSS file.

3.1.4

• 23 december 2025
• Improvement: styling of datatable blocks and loading states.
• Förbättring: förbättrad prestanda för hänvisningsfrågor.
• Förbättring: förbättrad prestanda för parameterfrågor.
• Improvement: exclude track hit over Rest Api from the Burst Rest Api Optimizer, this way all plugins are loaded during the hit, which is required for hook goals.
• Förbättring: lade till en reservmetod för att kombinera variabler och skript, ifall uppladdningskatalogen inte är skrivbar.
• Förbättring: meddelandet ’cron körs inte’ kan inte längre avfärdas, eftersom det är ett kritiskt problem.
• Förbättring: möjliggör sökning efter formaterad data i datatabeller, t.ex. kan du nu söka efter ’United States’ istället för US i platser-datatabellen.
• Förbättring: lägg till parameterfiltrering.
• Fix: filtering on devices block.

3.1.0.3

• 1 december
• Fix: saving settings changes after saving initial changes required a reload.
• Prestanda: Förbättringar av prestanda genom att avlasta resurskrävande processer under spårning till cron i omgångar
• Improvement: User Agent Parser improvements, removing invalid browsers
• Fix: dropdown for advanced filters not filtering the list.
• Fix: undefined tab caused by incomplete removal of sales menu when no WooCommerce or EDD detected.
• Fix: object caching on page counts causing slow update of page counts, props @fveits

3.0.2

• 25 november 2025
• Fix: some notices were incorrectly dismissed during validation.
• Förbättring: la till ett förtolligt test för förtolliga mål.
• Förbättring: lade till automatiserat test för återställning av arkivering.

3.0.0

• 11 november 2025
• Fix: compability with unknown plugin, allowing null value in get_timerange_dropdown() on WooCommerce products overview, props @tegid
• Fix: do not treat www and non www domains as different domains, when detecting multiple domains setup.
• Fix: remove obsolete slash in loading of goals script, which on some setups causes it to get blocked, props @jhndkrvzc
• Fix: top bar count did not show the ’k’ for thousands, ’M’ for millions, etc, only showing 1, instead of 1k.
• Nytt: höj minimikravet för PHP till 8.0 och för WordPress till 6.4