Changelog

Release date: 15 October 2026
Release post: https://webberzone.com/announcements/top-10-v4-6/

Added

• Koko Analytics as an optional data source for popular posts, including a mode that switches off Top 10 tracking.
• [Pro] Koko Analytics data in popular posts lists that span network sites.
• WordPress Abilities API support for popular posts and view counts on WordPress 6.9+.
• [Pro] Abilities for editing view counts and clearing the cache.
• [Pro] Advanced Popular Posts block with editable cards and six layout patterns.
• [Pro] Feed vs web tab on the Top 10 dashboard, reporting feed and web views and the posts most read via feed.
• Feed Visits column in count exports, restored on import.

Changed

• Popular posts lists spanning multiple network sites are now Pro only.
• Cached popular posts lists refresh when view counts or posts change, instead of waiting for the cache to expire.
• Daily popular posts queries add up view counts before loading posts, reducing query time on large sites.

Security

• Prevented password-unlocked excerpts from being shared with other visitors through cached popular posts lists.
• Prevented thumbnails from exposing images inside or attached to password-protected posts before the password was entered.
• Hardened thumbnail URLs to reject unsafe protocols.
• Restricted the popular posts REST endpoint to its documented parameters (limit, post_types, daily and context), preventing unbounded queries and probing of hidden post meta. limit is capped at 100 and post_types accepts only public post types.
• Prevented the view count REST endpoint from returning counts for posts the visitor cannot read, such as drafts.

Fixed

• Malformed custom thumbnail dimensions caused PHP errors during image-size selection.
• The popular posts query cache was never reused because its key changed every second.
• With Do not track bots enabled, views were not counted on cached pages that a bot had generated.
• Custom date ranges, such as those on the Top 10 dashboard, were rounded to midnight or the hour instead of using the exact start and end times.
• Every database upgrade re-altered the visits log and funnel table columns.
• The popular posts REST endpoint and get_tptn_posts() returned no posts, or raised a PHP warning, when called without a limit.

Full Changelog: v4.5.3...v4.6.0

Changelog

Release date: 15 October 2026

Security

• Hardened escaping of the popular posts wrapper classes.

Full Changelog: v4.5.2...v4.5.3

Beta for testing the new Koko Analytics data source. Top 10 can build its popular posts lists from the page views Koko Analytics records, and optionally stop its own tracking.

To test

1. Install and activate Koko Analytics.
2. Download top-10.zip below and install it through Plugins → Add New → Upload Plugin.
3. Go to Top 10 → Settings → Counter/Tracker → Data source and pick:
   • Hybrid: lists use Koko Analytics page views; Top 10 keeps tracking.
   • Koko Analytics only: lists use Koko Analytics page views; Top 10 tracking and its view counters are switched off.
4. Add a Top 10 Popular Posts block or [tptn_list daily="1" daily_range="7" disp_list_count="1"] and compare the counts with the Koko Analytics dashboard for the same dates.

Notes

• Top 10 reads koko_analytics_post_stats directly and sums page views per post, so custom periods work in whole days. Koko's "Last 14 days" includes today and matches a Top 10 range of 15 days.
• Overall lists add up all the data Koko Analytics holds.
• If Koko Analytics is deactivated, Top 10 falls back to its own counts and resumes tracking.
• Lists carry data-tptn-source="koko" or "top10" on their wrapper.

Docs: https://github.com/WebberZone/top-10/blob/master/docs/02-top-10-advanced/koko-analytics-data-source.md

This Free-only beta addresses missing human views after cached pages are generated with Do Not Track Bots enabled.

Top 10 now includes its tracker in bot-generated page HTML, so the cached page can record subsequent human visits. Known bots are still filtered at the tracking endpoints. Based on 4.5.2; the broader 4.6.0 query/cache changes are not included.

To test

1. Download top-10.zip below and install it through Plugins → Add New → Upload Plugin, replacing the existing Free plugin.
2. Keep Do Not Track Bots enabled and retain your current tracker type and tracking method.
3. Clear WP Rocket and CDN/page caches, then allow cache preloading to finish.
4. Visit several posts while logged out and verify their view counts in Top 10. For Funnel tracking, allow aggregation to run or use Sync Funnel Now.

Automated checks and Chrome tests verified human counting and bot rejection with replayed bot-generated cached HTML. WP Rocket’s actual cache-rebuild workflow still needs confirmation on the affected site. Existing settings and view data are preserved.

Changelog

Release date: 7 October 2026

Added

• TranslatePress translation for popular post titles, excerpts and links returned through the REST API.
• REST API endpoints toggle in the Features tab for disabling unused Top 10 API integrations.
• [Pro] TranslatePress support for lazy-loaded popular posts.
• [Pro] Independent lazy-loading module toggle in the Features tab. Disabling REST API endpoints also disables lazy loading.

Changed

• Updated Freemius SDK to 2.13.5.

Fixed

• Cached popular posts were shared across languages on WPML, Polylang and TranslatePress sites.
• Setup wizard labels were not associated with their input fields.
• Updating settings before any options had been saved could trigger a PHP deprecation warning.

Full Changelog: v4.5.1...v4.5.2

Changelog

Release Date - 19 September 2026

• Fixed:
  • Security: Hardened thumbnail dimension handling to prevent stored Cross-Site Scripting by an Author-level user via block attributes.

Full Changelog: v4.5.0...v4.5.1

Changelog

Release date: 7 September 2026
Release post: https://webberzone.com/announcements/top-10-v4-5/

Added

• [Pro] Popular Posts elements for Elementor, Bricks Builder and WPBakery Page Builder.
• [Pro] Optional site-wide tracking for front pages, posts pages, archives and searches.
• [Pro] Reduce Daily Table Size tool to combine older hourly records.
• [Pro] wp top10 db rollup command for CLI and multisite use.

Changed

• Reduced admin overhead on large multisite networks by caching table metadata, probing WPP tables directly and using estimated row counts on the Tools page.
• Sped up the dashboard with index-friendly dp_date ranges, optimized network popular-post queries and on-demand loading of historical tabs.
• Setting defaults are now resolved from a lightweight list instead of building every settings field, so reading an option early in the page load no longer loads translations too early.

Security

• Hardened settings sanitization for users without the unfiltered_html capability.
• Hardened referer and array handling in settings sanitization, and renamed the settings JS globals.

Fixed

• View tracking was lost during quick navigation or browser back-button restores.
• View counts were recorded for prerendered or initially hidden pages.
• Bot views were recorded from cached pages, and views were recorded for browser prefetches, prerenders and direct navigations to tracker URLs.
• Tracker scripts did not run when loaded asynchronously after DOMContentLoaded had fired.
• Generated output cache keys were not discoverable by the Clear Cache tools or the WP-CLI cache flush command.
• Settings on a multisite network read another site's values in the same request after a switch_to_blog() call, when read via tptn_get_option() or the global $tptn_settings.
• tptn_get_settings() returned false instead of an empty array when no settings had been saved yet.
• Visit data was silently lost in funnel aggregation, and the Fast Tracker raised an undefined array key warning.
• Plugin data was deleted when uninstalling one version while its paired free or Pro counterpart was active.
• Improved compatibility with PHP 8.6.
• [Pro] Daily counts in the wp top10 popular command did not respect the selected custom date range.

Full Changelog: v4.4.3...v4.5.0

Changes since 4.5.0-beta2

Items marked [Pro] are available only in Top 10 Pro.

• Fixed generated output cache keys not being discoverable by the Clear Cache tools and WP-CLI cache flush command.

Full Changelog: v4.5.0-beta2...v4.5.0-beta3

Changelog

Items marked [Pro] are available only in Top 10 Pro.

• Features:

  • [Pro] Popular Posts (Top 10) elements for Elementor, Bricks Builder, and WPBakery Page Builder.
  • [Pro] Optional site-wide tracking for front pages, posts pages, archives, and searches.
  • Added a Reduce Daily Table Size tool to combine older hourly records.
  • [Pro] Added the wp top10 db rollup command for CLI and multisite use.

• Fixed:

  • View tracking being lost during quick navigation or browser back-button restores.
  • View counts being recorded for prerendered or initially hidden pages.
  • Bot views being recorded from cached pages, and views being recorded for browser prefetches, prerenders, or direct navigations to tracker URLs.
  • Tracker scripts not running when loaded asynchronously after DOMContentLoaded has fired.
  • [Pro] Daily counts in the wp top10 popular command not respecting the selected custom date range.
  • Slow network admin requests on large multisite networks by caching table checks, using one metadata query and estimated table statistics, optimizing network popular-post and dashboard queries, and lazy-loading historical tabs.

Changes since 4.5.0-beta1

• Faster network admin: single table-metadata query, lazy-loaded dashboard tabs, sargable date-range queries.
• Fixed network-wide tools cache handling.
• Fixed dashboard tab content and multisite labels.
• Packaging: the CrawlerDetect library is now bundled in the distribution zip. The 4.5.0-beta1 zip omitted it, which silently disabled bot detection and emitted include() warnings — that was a packaging issue, not a plugin bug.

Full Changelog: v4.5.0-beta1...v4.5.0-beta2

Changelog

Items marked [Pro] are available only in Top 10 Pro.

• Features:

  • [Pro] Popular Posts (Top 10) elements for Elementor, Bricks Builder, and WPBakery Page Builder.
  • [Pro] Optional site-wide tracking for front pages, posts pages, archives, and searches.
  • Added a Reduce Daily Table Size tool to combine older hourly records.
  • [Pro] Added the wp top10 db rollup command for CLI and multisite use.

• Fixed:

  • View tracking being lost during quick navigation or browser back-button restores.
  • View counts being recorded for prerendered or initially hidden pages.
  • Bot views being recorded from cached pages, and views being recorded for browser prefetches, prerenders, or direct navigations to tracker URLs.
  • Tracker scripts not running when loaded asynchronously after DOMContentLoaded has fired.
  • [Pro] Daily counts in the wp top10 popular command not respecting the selected custom date range.
  • Slow network admin requests on large multisite networks by caching table checks, optimizing network popular-post queries, and caching network dashboard widgets.

Full Changelog: v4.4.4...v4.5.0-beta1