Burst Statistics – Simples statistiques WordPress (Alternative à Google Analytics)

Journal des modifications

3.6.1

• July 14th 2026
• New: Google Search Console integration: connect your Google account on the new Integrations settings page to see your top Google search queries in a new statistics block.
• New: Gutenberg support for goals: mark buttons, images and navigation links as a goal directly in the block editor, including a metadata migration for block goal/page linkage.
• New: privacy level setting to choose how Burst recognizes visitors (cookie, private mode or device fingerprint), with a matching onboarding step.
• New: use the country reported by edge/CDN headers as a fallback for country detection, props @knofte.
• Improvement: increased the goal limit from one to three goals.
• Improvement: inline search filtering in the Goals Overview dropdown.
• Improvement: filter out spam and injection probes from on-site search terms.
• Improvement: the monthly search-terms cleanup now only removes terms without results whose single occurrence is older than a month.
• Improvement: added an explanation for the automatically created burst_viewer user, and excluded it from user queries and author archives.
• Security: share-link authorization now resolves the endpoint from the dispatched REST route, so it cannot desync from the executed route via request parameters.
• Security: improved escaping in email report tables and removed duplicate escaping.
• Fix: leave non-filesystem session save paths (Redis, memcached) untouched instead of falling back to the uploads directory, props @knofte.

3.6.0.1

• July 2nd 2026
• Fix: cleaned up an unused Pro-only setting that remained on some free installs. This had no effect on tracking.

3.6.0

• July 1st 2026
• New: country-level geolocation (GeoIP country tracking).
• New: WordPress Search Terms block: see what your visitors are looking for on your site.
• New: « All goals » option in the dashboard Goals block.
• New: AI Chat model selector: select your preferred model.
• New: WP Consent API notice task that detects whether the Consent API is active.
• Improvement: redesigned, unified tooltips with theme-consistent styling, high-contrast borders and improved readability.
• Improvement: rows-per-page selection is now persisted per datatable.
• Improvement: query and database performance improvements.
• Improvement: updated bundled libraries.
• Fix: prevent errors caused by the external link tracking class loading on the free plugin, props @dragon013.
• Fix: check open_basedir restrictions on the session save path to prevent warnings, props @jstark55.
• Fix: date picker and Reading Engagement UI layout, stacking, overflow and scroll-lock issues on mobile and tablet.
• Fix: browser detection cleanup.
• Fix: stricter match on AI plugins in REST API optimizer to prevent loading plugins only based on ‘ai’ string in slug, props @nicolas-cuny.
• Fix: first hit is no longer missed when Ghost mode and Turbo mode are combined.

3.5.1

• June 17th 2026
• New: Reading Engagement statistics block.
• New: Pro forms tracking.
• New: Custom CSS block.
• Improvement: store product IDs as integers in the ecommerce cart and order tables for smaller, faster joins.
• Improvement: use native date types and right-sized columns for the report tables.
• Improvement: removed duplicate database indexes on the subscription, orders and report tables to speed up inserts and updates.
• Improvement: added outgoing links, search terms, and forms to the Abilities API.
• Improvement: query data performance and accuracy improvements.
• Improvement: overwrite the free plugin’s tracking script with the premium version during upgrade.
• Improvement: more robust report email delivery.
• Fix: container queries and various UI/UX improvements.
• Fix: mobile responsiveness for the funnel.
• Fix: report localization, adding locale handling in report configuration and formatting.
• Fix: use ISO-8601 weekday numbers so report scheduling does not break on other locales.
• Fix: generalize the GeoIP database type check to support commercial GeoIP2-City databases without triggering mismatch overwrites.

3.5.0

• June 3rd 2026
• Improvement: AI chat availability checks and ability registration, preventing PHP notices and duplicate ability registrations.
• Fix: AI Chat integration with AI plugin.
• Fix: missing GROUP BY in a statistics query.

3.4.3

• May 20th 2026
• Fix: AI chat enablement and MainWP integration reminder tasks can now be dismissed permanently.
• Fix: AI chat assistant is now hidden for users without the manage_burst_statistics capability.
• Fix: modal position calculation in the shared viewer.
• Fix: scope application password auth probing to Burst REST endpoints, so authentication on unrelated REST routes (e.g. WooCommerce) is no longer affected.
• Security: harden rest api optimizer, Props Sanjay Singh Jhala.
• Improvement: performance of background aggregated table build, time out guards on sql queries, additional indexes on the burst_statistics table.
• Improvement: AI chat enablement task now links to the « Ask Burst anything » setup guide.

3.4.2

• May 12th 2026
• New: AI chat integration via the WordPress Abilities API, including granular datatable abilities with metric allow-listing for pages, parameters, referrers, countries, campaigns, sales and subscription products.
• New: granular datatable REST endpoints (data/datatable/{id} and data/ecommerce/datatable/{id}) so the dashboard and AI abilities can request a specific table by id.
• Improvement: refactor the Share class into dedicated Share_Tokens, Share_Routing, Share_Auth and Share_UI services for clearer responsibilities and easier maintenance.
• Improvement: dark mode initialization respects an explicit « light » preference so users on a dark OS no longer briefly see a dark skeleton when they have forced light mode.
• Improvement: upgrade routine corrects the stored activation time for sites with older data.
• Improvement: replace native checkboxes with Radix checkboxes in the Share dialog for consistent styling.
• Improvement: shared-link capability checks now reflect the currently requested dashboard tab instead of a single cached value, so per-tab permissions are enforced correctly during batch REST requests.
• Fix: dashboard route returns a 404 when the user is not allowed to load it, instead of rendering an empty page.
• Security: limit Share link viewer statistics access, props Sanjay Singh Jhala.
• Security: REST API optimizer now matches the Burst namespace strictly against the URL path (anchored at burst/v1), props Sanjay Singh Jhala.
• Security: harden MainWP proxy authentication. Props Sanjay Singh Jhala, Chloe Chamberland & PRISM – Wordfence
• Security: Auto Installer now requires the install_plugins capability instead of activate_plugins and only accepts download URLs from official Burst hosts. Props Sanjay Singh Jhala.

3.4.1.1

• May 5th 2026
• Fix: CSS styling regression due to obsolete javascript files being included in the dashboard build.

3.4.1

• April 29th 2026
• New: automated tests for subscription statistics dashboard.
• New: abilities API integration.
• Improvement: move plugin activation logic to bootstrap class.
• Improvement: split ajax fallback logic into do_action and get_action.
• Fix: broken upgrade url in report settings.
• Fix: When both Story report and share links are generated, the UX could generate an error.
• Security: increase minimum required capability from view to manage in get_posts endpoint, Props Sanjay Singh Jhala.
• Security: hardened MainWP proxy authentication and CORS origin validation, Props Sanjay Singh Jhala.

3.4.0

• April 22nd 2026
• New: dark mode support for the Burst Statistics dashboard.
• New: support for MainWP integration.
• New: all time date range for datepicker selection.
• New: support for application passwords. It is now possible to use the Burst Rest API endpoints with application passwords.
• Improvement: add detection for ad blockers. If an ad blocker breaks the Burst dashboard, show a warning about this.
• Improvement: PHP warning about not existing referrers table when clearing the table.
• Fix: restore bounces filter, allowing overriding the default time used to decide if a visit is a bounce.
• Fix: fixed a bug in the visitor calculation for referrers, caused by changes for the « exclude » option in filters, props @bikew1se.
• Fix: Share links sessions are now cleaned up daily, to prevent extended access to the link for longer than the set expiration time, Props Sanjay Singh Jhala.
• Security: ajax fallback for get_reports endpoint unintentionally allowed users with burst_view capability to see reports configuration, props Sanjay Singh Jhala.

3.3.0

• April 1st 2026
• New: Time per session filter, allowing filtering by visit duration.
• New: Dark mode support for email reports.
• Improvement: Move columns from statistics to sessions table, reducing data storage and improving query performance.
• Improvement: Session data included in archive CSV exports.
• Improvement: Add missing database indexes for improved performance.
• Security: Share link viewers could view report data (recipient email addresses, scheduling configuration). Props Sanjay Singh Jhala.
• Security: Share link viewers could view ecommerce/sales data, even when the share link was scoped to non-sales tabs only. Props Sanjay Singh Jhala.
• Fix: Insights chart grouping by month was incorrect.
• Fix: Cron URL protocol mismatch could cause a http link to be included in the email report, even when the site url is https..
• Fix: Filter type issue breaking the filtering on the devices block, props Andrew.
• Fix: Duplicate key error in SQL hash update query.
• Fix: Email report logo centering and dark mode styling.
• Fix: A burst test hit could be used to bypass the built-in IP block, props Sanjay Singh Jhala.

3.2.3

• March 12th 2026
• Fix: share link for non logged in users not loading page.

3.2.1

• March 9th 2026
• Security fix: Fixed a missing authorization check that allowed users with Burst View privilege to manage reports. Props Sanjay Singh Jhala.
• Improvement: set turbo default to enabled, and add notice to recommend enabling it when cookieless tracking is enabled.
• Improvement: check if PharData class is installed on the server to prevent fatal errors.
• Fix: Store scheme for usage during cron jobs. During cron, the site_url is http. For the javascript generation, we need it to reflect the actual scheme, usually https.
• Fix: duplicate fields in the reporting settings when the share link is opened by an admin user.
• Fix: url not found warning when classic premium report is generated.
• Fix: too strict use of sanitizers causing table prefixes to get lowercase. props @parkentosh

3.2.0

• February 25rd 2026
• New: anonymously share data to help us improve Burst Statistics: build industry benchmarks, targeted feature development, and performance improvements.
• New: add notice about discord, inviting users to join our discord server.
• New: Easily share statistics with your team or clients, with the share button in the Burst Statistics dashboard.
• Fix: catch non json encoded data in Rest API tracking, props @rajkumarreddyv
• Fix: Bounce and bounce rate calculations now correctly count distinct bounced sessions instead of summing bounce flags, preventing inflated numbers.
• Fix: default value logic for ‘merge variables and scripts’ made it impossible to disable the setting.

3.1.6

• January 20th 2026
• Fix: deleting old data in archive functionality not working due to incorrect SQL syntax.
• Fix: Not filtering browser/OS data by device on the insights block, props @alisontaylorbc.
• Improvement: add automated test for data deletion.
• Improvement: add persistent sorting to datatable block, props @ankush.
• Improvement: filtering by continent.

3.1.5

• January 7th 2026
• Improvement: auto close notices in the right bottom of the screen.
• Improvement: some minor mobile responsiveness improvements.
• Improvement: extend automated tests with live visitors test.
• Improvement: wrapping of long URLs in live visitors view.
• Improvement: extended PHPCS coverage.
• Fix: when the browser’s local storage is full, adding filters could cause an error.
• Fix: enforce https on combined variables and scripts URL, to prevent mixed content warnings.
• Fix: onboarding for RTL languages tried to load non existing RTL CSS file.

3.1.4

• December 23rd 2025
• Improvement: styling of datatable blocks and loading states.
• Improvement: referrer query performance improvements.
• Improvement: parameter query performance improvements.
• Improvement: exclude track hit over Rest Api from the Burst Rest Api Optimizer, this way all plugins are loaded during the hit, which is required for hook goals.
• Improvement: added fallback to default method for combine variables and scripts, in case the uploads directory is not writable.
• Improvement: the ‘cron not running’ notice not dismissible anymore, as it is a critical issue.
• Improvement: allow search for formatted data on datatables, e.g. you can now search for ‘United States’ instead of US on the locations datatable.
• Improvement: add parameter filtering.
• Fix: filtering on devices block.

3.1.0.3

• December 1st
• Fix: saving settings changes after saving initial changes required a reload.
• Performance: Performance improvements by offloading resource greedy processes during tracking to cron in batches
• Improvement: User Agent Parser improvements, removing invalid browsers
• Fix: dropdown for advanced filters not filtering the list.
• Fix: undefined tab caused by incomplete removal of sales menu when no WooCommerce or EDD detected.
• Fix: object caching on page counts causing slow update of page counts, props @fveits

3.0.2

• November 25th 2025
• Fix: some notices were incorrectly dismissed during validation.
• Improvement: added automated test for hook goals.
• Improvement: added automated test for archiving restoration.

3.0.0

• November 11th 2025
• Fix: compability with unknown plugin, allowing null value in get_timerange_dropdown() on WooCommerce products overview, props @tegid
• Fix: do not treat www and non www domains as different domains, when detecting multiple domains setup.
• Fix: remove obsolete slash in loading of goals script, which on some setups causes it to get blocked, props @jhndkrvzc
• Fix: top bar count did not show the ‘k’ for thousands, ‘M’ for millions, etc, only showing 1, instead of 1k.
• New: increase minimal required versions for PHP to 8.0, for WordPress to 6.4