GTM4WP – A Google Tag Manager (GTM) plugin for WordPress

WordPress plugin · duracelltomi-google-tag-manager · WordPress.org ↗

Latest v2.0.2 Last release Sep 15, 2026 Tested up to WP 7.1.1 700,000+ active installs

Critical

High

Known total

Unfixed

Running GTM4WP – A Google Tag Manager (GTM) plugin for WordPress on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
HIGH CVSS 7.2	GTM4WP – A Google Tag Manager (GTM) plugin for WordPress [duracelltomi-google-tag-manager] < 1.22.4 WPVulnerability	< 1.22.4	v1.22.4	CVE-2026-16597	Jul 28, 2026
MEDIUM CVSS 4.8	GTM4WP – A Google Tag Manager (GTM) plugin for WordPress [duracelltomi-google-tag-manager] < 1.15.2 WPVulnerability · PoC available	< 1.15.2	v1.15.2	CVE-2022-1961	May 31, 2022
MEDIUM CVSS 6.1	GTM4WP – A Google Tag Manager (GTM) plugin for WordPress [duracelltomi-google-tag-manager] < 1.15.1 WPVulnerability	< 1.15.1	v1.15.1	CVE-2022-1707	May 19, 2022
UNKNOWN	GTM4WP – A Google Tag Manager (GTM) plugin for WordPress [duracelltomi-google-tag-manager] < 1.15.1 WPVulnerability	< 1.15.1	v1.15.1	—	May 12, 2022

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.