UAU Ready
Description
Visitor Traffic Real Time Statistics pro tracks visits in real time right inside WordPress, recording each visitor’s country, city, and region, search engine, referring keyword, browser, and operating system, plus displaying geographic maps and the count of users currently online. Rated 4.9 out of 5 by over four hundred and fifty people, it keeps all data in your own database, with no reliance on external services.
Key Features of Visitor Traffic Real Time Statistics pro
- Per-visitor geolocation
Identifies the country, city, and region of each visit via an internal GeoIP database. - Geographic maps in the dashboard
Plots visitor origins on a visual map, filterable by period. - Traffic source and keywords
Captures referrers, search engines, and the terms that brought each visit. - Content and author reports
Ranks the site’s most-visited pages, posts, categories, and authors. - Statistics shortcodes
Publish counters on the front end, such as[ahctotalvisitors]and[ahctodayvisits].
Benefits of Visitor Traffic Real Time Statistics pro
- Data under your control
Metrics stay on your own server, with nothing sent to third-party platforms. - Numbers clean of bots
The bot filter keeps crawlers from inflating visits and pageviews. - Informed editorial decisions
Knowing what drives audience guides your next topics and formats. - Visible social proof
Front-end visit counters reinforce credibility with your audience.
Who Is Visitor Traffic Real Time Statistics pro For?
- Anyone who publishes content frequently and wants to know which posts actually sustain their audience.
- You, if you prefer to keep site statistics in your own database, without third-party scripts.
- Anyone tracking campaigns who needs to see the source, country, and keyword of visits on the same day.
How to Download Visitor Traffic Real Time Statistics pro
Visitor Traffic Real Time Statistics pro is available for download here on Ultrapack. The step-by-step to install this file is on the How to install tab, next to the description. Once activated, the reports and visitor map appear in their own menu in the admin dashboard.
Among audience counters for WordPress, this one stands out as an in-house analytics dashboard: it collects, stores, and displays everything locally, with daily, weekly, and monthly reports, data export, and breakdowns by device, browser, and operating system. The combination of real-time reading and accumulated history covers both a quick check and a trend analysis of traffic over the months.
Frequently asked questions
Is Visitor Traffic Real Time Statistics pro GPL-licensed?
Yes. Visitor Traffic Real Time Statistics pro is distributed under the GPL (GNU General Public License). You may legally use, modify and redistribute it on as many sites as you want.
Can I use Visitor Traffic Real Time Statistics pro on multiple sites?
Yes. You can install Visitor Traffic Real Time Statistics pro on as many sites as you want. Only automatic updates through Ultrapack Auto Updater have a limit: from 3 to 80 sites, depending on the plan.
How much does Visitor Traffic Real Time Statistics pro cost at Ultrapack?
Visitor Traffic Real Time Statistics pro costs US$2.99 as a single purchase, and it is also included in the subscription plans starting at US$12/mo (VIP I).
Does Visitor Traffic Real Time Statistics pro include updates?
Yes. The current version of Visitor Traffic Real Time Statistics pro is 11.23, published at Ultrapack on Sep 27, 2026. Subscribers update straight from the WordPress dashboard with UAU (Ultrapack Auto Updater).
Is Visitor Traffic Real Time Statistics pro scanned before publication?
Yes. Every version of Visitor Traffic Real Time Statistics pro goes through a malware scan (ClamAV and YARA rules, at UltraHub) before it is published.
What are the requirements for the plugin Visitor Traffic Real Time Statistics pro?
Requires WordPress 3.0.1 or higher. Tested up to WordPress 7.0.
What changed in this version
Version 11.23
- Security: fixed an unauthenticated stored XSS vulnerability via the "page_title" parameter of the visitor-tracking endpoint (ahcpro_track_visitor). A crafted page title could be stored in the title-traffic table and execute in the admin dashboard when the "Traffic by Title" table was loaded. Page titles, user agents and referers are now stripped of any HTML on storage (both in the AJAX handler and in the hit counter itself), and page titles and links are escaped on output, so payloads stored by older versions can no longer execute either. The Excel export keeps clean, readable titles.
- Security: fixed reflected XSS in the dashboard date-range search fields, which echoed submitted values back into the page without escaping.
- Security: hardened output escaping in the "Latest Search Words" block and in the mobile-app REST API (page titles, keywords and referers are no longer returned with markup).
- Hardening: admin redirects now use wp_safe_redirect, and the database index upgrade routine validates table/index identifiers before running.
Version 11.22
- Security: fixed a stored XSS vulnerability in the search-keywords path of the visitor-tracking endpoint. An unauthenticated visitor could submit a crafted "referer" (e.g. a search-engine URL whose query string contained a percent-encoded HTML payload) that survived URL sanitization, was decoded back to markup, stored in the keywords table, and executed in the admin dashboard when viewing the Latest Search Words / keywords report. Extracted keywords are now stripped of any HTML on storage and escaped on output (URL via esc_url, text via esc_html), in both the table view and the Excel export. This completes the 11.19 tracking-endpoint hardening by closing the sibling "referer" parameter.
Version 11.21
- Fix: prevented a fatal error on older PHP versions (below 7.1) where autoloading the bundled MaxMind GeoIP2 library could crash the visitor-tracking request (HTTP 500), causing visits to not be recorded. On such servers the plugin now safely skips the local GeoIP database reader and falls back to the other geolocation methods (Cloudflare headers, permanent cache, external API), so tracking keeps working. The reader initialization was also hardened to catch a broader range of runtime errors and log them when WP_DEBUG is enabled.
Version 11.20
- Performance: the CanvasJS charting library (~527 KB) is no longer loaded for regular front-end visitors. It is only enqueued in the admin dashboard and, on the front-end, only for logged-in administrators who can see the admin-bar chart. This improves front-end PageSpeed / Total Blocking Time with no change to the charts.
Version 11.19
- Security: fixed a stored XSS vulnerability where an unauthenticated visitor could submit a crafted page URL (and related fields) through the visitor-tracking endpoint that would execute in the admin dashboard when viewing the IP Tracking / visitor path modal. Visitor-supplied URLs, titles and related fields are now sanitized on storage and escaped on output (both server-side and in the admin JavaScript).
Release notes published by the developer.
How to install
Automatic updates: this item is updated by the Ultrapack Auto Updater. With it installed, the new version shows up in your dashboard like any other WordPress update (how to set it up).
- Download the file
visitors-traffic-real-time-statistics-pro.zip. - In the WordPress dashboard, go to Plugins > Add New > Upload Plugin.
- Select the file
visitors-traffic-real-time-statistics-pro.zipand click Install Now. - Click Activate.
Requirements: Requires WordPress 3.0.1 or higher. Tested up to WordPress 7.0.
Stuck on a step? Open a ticket telling us which one you stopped at.
