Skip to content
PluginCanary

GTM4WP

GTM4WP - A Google Tag Manager (GTM) plugin for WordPress
by Thomas Geiger · 700,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 12 Oct 2026, 16 releases in 24 months, no unpatched vulnerabilities.

88/ 100 Canary Score
Sub-scores for GTM4WP
Ownership100
Maintenance100
Security90
Support54
Reputation85

How the score works

Quick answers

Is GTM4WP still maintained?
Yes. Last release 12 Oct 2026, 16 releases in the last 24 months. 12 Oct 2026 · wordpress.org
Who owns GTM4WP, and has it changed hands?
No change recorded. Main committer duracelltomi since Sep 2013. 4 Nov 2026 · SVN log
Was GTM4WP removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is GTM4WP safe?
4 known vulnerabilities, all fixed (latest in 1.22.4). Not on the exploited list. 28 Jul 2026 · Wordfence Intelligence
Is the latest GTM4WP update safe to install?
No ownership change before 2.0.6. No one-star spike after it. 12 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
duracelltomi23 Sep 2013 to 12 Oct 2026, 327 commits

1 committer recorded. No ownership change since 2013.

Maintenance

Last release
23 days ago
Releases, 24 months
16
Tested up to
7.1 current
Requires PHP
8.0 supported 8.2+
Releases per quarter
Releases per quarter for GTM4WP
Q1 20242
Q2 20241
Q3 20240
Q4 20241
Q1 20250
Q2 20252
Q3 20252
Q4 20252
Q1 20260
Q2 20260
Q3 20267
Q4 20262

Last release 12 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (1 review). Lifetime: 4.5.

Average rating per quarter for GTM4WP
Q4 20235.0
Q1 20242.3
Q3 20242.0
Q4 20243.0
Q1 20251.0
Q3 20253.0
Q4 20255.0
Q3 20265.0

Average rating stayed at 5.0 between Q4 2023 and Q3 2026.

Rating distribution
5 star132
4 star1
3 star5
2 star2
1 star15
Latest low reviews

Security record

1 vulnerability in 24 months (4 on record), patched (latest fixed in 1.22.4).

Show 4 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
28 Jul 2026GTM4WP <= 1.22.3 - Unauthenticated Stored Cross-Site Scripting via WooCommerce Billing Fields7.2<= 1.22.31.22.4Patched before disclosure
31 May 2022Google Tag Manager for WordPress (GTM4WP) <= 1.15.1 - Stored Cross-Site Scripting via Content Element ID5.5<= 1.15.11.15.2Patched before disclosure
19 May 2022Google Tag Manager for WordPress <= 1.15 - Reflected Cross-Site Scripting via Site Search6.1<= 1.151.15.1Patched before disclosure
12 May 2022Google Tag Manager for WordPress <= 1.15 - Cross-Site Scripting via Cloudflare Country Code7.2<= 1.151.15.11

Changelog mentions of security fixes: 1.22.4 (nonce, escaping, sanitize); 1.22.5 (security); 2.0.0 (XSS, nonce, escaping, sanitize); 2.0.3 (nonce).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

54% of 13 support threads resolved in the last 2 months.

Momentum

700,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for GTM4WP
4 May 20264,584
11 May 202615,956
18 May 202616,221
25 May 202615,789
1 Jun 202614,886
8 Jun 202615,894
15 Jun 202614,651
22 Jun 202614,447
29 Jun 202613,609
6 Jul 202614,008
13 Jul 202613,773
20 Jul 2026222,146
27 Jul 202690,033
3 Aug 2026298,032
10 Aug 202660,518
17 Aug 202644,218
24 Aug 202640,463
31 Aug 2026368,446
7 Sep 202674,009
14 Sep 2026247,567
21 Sep 2026237,374
28 Sep 2026381,265
5 Oct 2026105,544
12 Oct 2026224,608
19 Oct 202672,606
26 Oct 202674,696
2 Nov 20268,528

Weekly downloads over the last 4 weeks are 5% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Microsoft ClarityScore 100 · 200,000+Google Analytics for WooCommerceScore 100 · 100,000+WP-PostViewsScore 100 · 90,000+Pixel CatScore 100 · 40,000+Conversion Tracking for WooCommerceScore 100 · 20,000+

Facts

Version2.0.6
AuthorThomas Geiger
Added23 Sep 2013
Last updated12 Oct 2026
Active installs700,000+
Requires WordPress6.3
Tested up to7.1.4
Requires PHP8.0
CategoryE-commerce & Shopping
Tagsgtm, google ads, tag manager, google analytics, google tag manager

Questions

Is GTM4WP still maintained?

Yes. Last release 12 Oct 2026, 16 releases in the last 24 months.

Who owns GTM4WP, and has it changed hands?

No change recorded. Main committer duracelltomi since Sep 2013.

Was GTM4WP removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is GTM4WP safe?

4 known vulnerabilities, all fixed (latest in 1.22.4). Not on the exploited list.

Is the latest GTM4WP update safe to install?

No ownership change before 2.0.6. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue