WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: duracelltomi-google-tag-manager (Used by 87,981 domains)

Security snapshot

Across the 87,942 duracelltomi-google-tag-manager sites we've scanned, compared to the all-WordPress average.

Grade A 3% Grade B 4% Grade C 6% Grade D 12% Grade F 76%
Fail the header check (F)76%vs 82.5% avg
Leak usernames27%vs 38.5% avg
Expose a sensitive file2.7%vs 1.8% avg
Use HTTPS97%vs 96.2% avg

GTM4WP – A Google Tag Manager (GTM) plugin for WordPress

Google Tag Manager (GTM) is Google’s free tool for everyone to manage and deploy analytics and marketing tags as well as other code snippets
using an intuitive web UI. To learn more about this tool, visit the official website.

This plugin places the GTM container code snippets onto your WordPress website so that you do not need to add it manually.
Multiple containers are also supported!

The plugin complements your GTM setup by pushing page meta data and user information into the so called data layer.
Google’s official help pages includes more details about the data layer.

PHP 7.4 is required to use this plugin.

GTM container code placement

The original GTM container code is divided into two parts:

The first part is a javascript code snippet that is added to the section of every page of the website.
This part is critical to enable all features of GTM, and this plugin helps to place this part
correctly on your site.

The second part is an iframe snippet that acts as a failsafe/fallback should users’ JavaScript be disabled.
Google recommends – for best performance – to place this code snippet directly after the opening tag on each page.

Albeit not ideal, it will work when placed lower in the code. This plugin provides a code placement option for the second code snippet.

If your WordPress theme is compatible with the additions of WordPress 5.2 then this plugin will place this second code to the right place.
Users of the Genisis theme, GeneratePress theme, Elementor, Oxygen Builder and Beaver Builder Theme will also have this placed correctly.
To utilize this, set the compatibility mode in plugin options to off.

All other users can place this second code snippet using a custom PHP code (“Manually coded” option) or select the so called “Footer” option to
add the code lower in the code (it is not the recommended way but will work)

Basic data included

  • post/page titles
  • post/page dates
  • post/page category names
  • post/page tag names
  • post/page author ID and name
  • post/page ID
  • post types
  • post format
  • post count on the current page + in the current category/tag/taxonomy
  • custom terms associated with any post type
  • logged in status
  • logged in user role
  • logged in user ID (to track cross device behaviour in Google Analytics)
  • logged in user email address (both unhashed and SHA256 hased values to be used with tracking)
  • logger in user creation date
  • site search data
  • site name and id (for WordPress multisite instances)
  • IP address of the visitor (please use the explicit consent of the visitor to utilize this)

Browser / OS / Device data

  • browser data (name, version, engine)
  • OS data (name, version)
  • device data (type, manufacturer, model)

Data is provided using the WhichBrowser library: http://whichbrowser.net/

Weather data

(beta)

Push data about users’ current weather conditions into the dataLayer. This can be used to generate weather-related
audience/remarketing lists on ad platforms and allows for user segmentation in your web analytics solutions:

  • weather category (clouds, rain, snow, etc.)
  • weather description: more detailed data
  • temperature in Celsius or Fahrenheit
  • air pressure
  • wind speed and degrees

Weather data is queried from Open Weather Map. Depending on your websites traffic, additional fees may apply:
http://openweathermap.org/price

An (free) API key from OpenWeatherMap is required for this feature to work.

ipstack.com is used to determine the site visitor’s location. A (free) API key from IPStack.com is required for this feature to work:
https://ipstack.com/product

Media player events

(experimental)

Track users’ interaction with any embedded media:

  • YouTube
  • Vimeo
  • Soundcloud

DataLayer events can be chosen to fire upon media player load, media is being played, paused/stopped and optionally when
the user reaches 10, 20, 30, …, 90, 100% of the media duration.

Tracking is supported for embedded media using the built-in oEmbed feature of WordPress as well as most other media plugins
and copy/pasted codes. Players injected into the website after page load are not currently supported.

Scroll tracking

Fire tags based on how the visitor scrolls from the top to the bottom of a page.
An example would be to separate “readers” (who spend a specified amount of time on a page) from “scrollers”
(who only scroll through within seconds). You can use these events to fire Analytics tags and/or remarketing/conversion tags
(for micro conversions).

Scroll tracking is based on the solution originally created by

  • Nick Mihailovski
  • Thomas Baekdal
  • Avinash Kaushik
  • Joost de Valk
  • Eivind Savio
  • Justin Cutroni

Original script:
http://cutroni.com/blog/2012/02/21/advanced-content-tracking-with-google-analytics-part-1/

Blacklist & Whitelist Tag Manager tags, triggers and variables

To increase website security, you have the option to white- and blacklist tags/triggers/variables.
You can prevent specific tags from firing or the use of certain variable types regardless of your GTM setup.

If the Google account associated with your GTM account is being hacked, an attacker could easily
execute malware on your website without accessing its code on your hosting server. By blacklisting custom HTML tags
and/or custom JavaScript variables you can secure the Tag Manager container.

Integration

Google Tag Manager for WordPress integrates with several popular plugins. More integration to come!

  • Contact Form 7: fire an event when a Contact Form 7 form was submitted with any result (mail sent, mail failed, spam detected, invalid input)
  • WooCommerce:
    • Implementation of GA4 E-commerce
    • Does not support promotions since WooCommerce does not have such a feature (yet)
    • Does not support refunds
    • Compatibility with High Performance Order Storage (HPOS)
  • AMP: load your AMP container on the AMP version of your pages
  • Cookiebot: use automatic cookie blocking mode if needed
  • Google Consent Mode v2: fire the “default” command with specific consent flags to integrat with non-certified Consent Management Platforms (CMPs) and plugins.

Server side containers

If you are using a server side container
you can enter your custom domain name and custom path to load gtm.js from your there.

Exclude specific user roles from being tracked

You can set which user roles needs to be excluded from tracking when a user with that role visits the frontend. This will completely disable the container code for that user.

Domain Exposures Headers Last Checked
h*l*o*o*n*n.com F Sep 5, 2026
h*l*o*o*i*i*n.com (WP 7.0.4) F Sep 5, 2026
r*f*e*-*t*o.com (WP 6.8.8) F Sep 5, 2026
v*a*e*s*i*a.com F Sep 5, 2026
m*t*2*.pe (WP 7.1) F Sep 5, 2026
w*d.de (WP 6.9.7) F Sep 5, 2026
c*r*o*e*v.de (WP 7.1) B Sep 5, 2026
v*n*r*i.c*.nz (WP 6.8.8) F Sep 5, 2026
n*v*l*o*o*k*n*.com (WP 7.0.4) F Sep 5, 2026
y*r*e*.com F Sep 5, 2026
e*e*t*s*i*m*r.com (WP 6.9.7) F Sep 5, 2026
i*f*.ie (WP 6.8.8) F Sep 5, 2026
v*a*e*h*m*u*g*.com F Sep 5, 2026
d*p*n*a*o*o*a.com (WP 7.1) F Sep 5, 2026
v*l*a*t*o*o*i.it (WP 6.6.5) F Sep 5, 2026
e*e*t*s*o*c*r*o*.com (WP 6.5.10) F Sep 5, 2026
y*r*n*.com (WP 7.1) D Sep 5, 2026
n*t*e*i*g*o*p.com (WP 7.0.4) F Sep 5, 2026
s*-*o*f*r*.com C Sep 5, 2026
k*e*i*s*o*e*-*u*t*r*i*t*l.at (WP 6.7.7) F Sep 5, 2026
e*e*t*s*u*o*c*r*o*i*i*y*r*u*.com (WP 5.4.21) F Sep 5, 2026
r*f*e*t*e*r*i*m*n*g*o*p.com (WP 7.1) F Sep 5, 2026
r*f*e*t*e*r*i*m*n*.com (WP 7.1) F Sep 5, 2026
r*f*e*t*e*a*.com (WP 7.1) F Sep 5, 2026
r*p*i*l*b*r*t*r*.com F Sep 5, 2026
h*l*o*f*a*f*i*i*t*r*o*s.com (WP 7.1) F Sep 5, 2026
a*t*c*a*.es (WP 7.0.4) F Sep 5, 2026
d*u*l*j*.fr (WP 6.6.4) F Sep 5, 2026
s*c*a*m*d*a*a*a*e*i*.com (WP 7.1) F Sep 5, 2026
n*s*e*h*o*o*i*s.com (WP 7.0.3) B Sep 5, 2026
a*c*e*t*o*p*.com F Sep 5, 2026
w*r*e*b*j*u*o*o*u*.nl (WP 7.1) F Sep 5, 2026
m*x*u*s*o*t*r.com (WP 6.8.2) F Sep 5, 2026
t*e*d*i*t*r*a*.com (WP 6.7.1) D Sep 5, 2026
d*p*n*a*c*-*n*o*.com (WP 6.7.7) D Sep 5, 2026
a*c*e*t*a*u*a*.com (WP 7.1) F Sep 5, 2026
e*e*t*s*l*v*l*a.com F Sep 5, 2026
a*e*p*o*-*s*d*d.c*.il (WP 7.1) F Sep 5, 2026
r*p*i*e*p*m*s.com F Sep 5, 2026
y*p*y.com (WP 7.1) F Sep 5, 2026
r*f*e*t*o*s*o*t*b*.com F Sep 5, 2026
y*r*a*u*n*i*l*n*s*.com (WP 7.0.4) F Sep 5, 2026
n*p*s*.com (WP 7.0.4) F Sep 5, 2026
s*o*d*m.de F Sep 5, 2026
c*b*s*o*l*g*t.c*.il (WP 7.1) F Sep 5, 2026
r*l*e*p*a*e*.c*.il (WP 7.1) F Sep 5, 2026
h*l*p*o*s.c*.il (WP 7.1) F Sep 5, 2026
t*v*i.c*.il (WP 7.1) F Sep 5, 2026
k*e*e*t*.c*.il (WP 7.1) F Sep 5, 2026
v*g*s.c*.il (WP 7.1) F Sep 5, 2026
s*r*o*e*h.c*.il (WP 7.1) F Sep 5, 2026
r*s*a*.c*.il (WP 7.1) F Sep 5, 2026
a*e*p*o*s*o*e.c*.il (WP 7.1) F Sep 5, 2026
a*c*s*i*l*.o*g.il (WP 7.1) F Sep 5, 2026
t*v*g*o*p.co (WP 7.1) F Sep 5, 2026
r*p*i*b*s*.com (WP 7.1) F Sep 5, 2026
e*s*r*m*u*n*t*r*.com F Sep 5, 2026
r*f*e*t*o*b*o.com F Sep 5, 2026
t*n*p*n*o*i*i*l.es (WP 7.0.4) F Sep 5, 2026
i*s*d*p*a*t*.net (WP 7.1) F Sep 5, 2026
v*t*s*a*o*l*.com (WP 6.9.7) F Sep 5, 2026
d*n*d*n*s*o*.rs (WP 7.1) F Sep 5, 2026
f*r*i*g*o*f*t*r*.it (WP 6.2.11) F Sep 5, 2026
d*p*n*g*s.com (WP 6.1.12) F Sep 5, 2026
h*l*o*y*a*l.com F Sep 5, 2026
p*r*i*a.c*.il (WP 7.1) D Sep 5, 2026
y*p*b*k*.com D Sep 5, 2026
b*c*m*o*.co (WP 4.9.8) F Sep 5, 2026
v*n*p*.c*.il (WP 7.1) F Sep 5, 2026
s*f*a.c*.il F Sep 5, 2026
r*p*i*a*v*s*r*r*.com (WP 7.1) F Sep 5, 2026
r*p*i*-*a*e.com (WP 7.1) F Sep 5, 2026
m*x*t*i*a.com F Sep 5, 2026
n*m*t*o*.com (WP 7.1) F Sep 5, 2026
u*r*e*s.de (WP 7.1) F Sep 5, 2026
e*e*t*a*k*t*n*.com D Sep 5, 2026
e*e*t*a*k*t*r.com F Sep 5, 2026
e*f*l*r*k*i*g.de (WP 7.1) F Sep 5, 2026
v*t*g*t*.com (WP 6.7.4) F Sep 5, 2026
f*r*e*-*a*r*n.at (WP 7.0.4) F Sep 5, 2026
s*c*a*i*t*a*l.com A Sep 5, 2026
s*c*a*i*s*r*n*e*e*d*.com (WP 7.1) F Sep 5, 2026
a*e*n*n*f*l*u*e*a*.c*m.au (WP 7.0.4) F Sep 5, 2026
f*g.c*.uk (WP 7.1) D Sep 5, 2026
h*l*o*i*a*t*.com C Sep 5, 2026
h*l*o*i*l*.com B Sep 5, 2026
a*u*s*s*r*i*i*s.es (WP 6.1.12) F Sep 5, 2026
e*e*t*e*d*r*h*p*n*t*t*t*.com (WP 6.9.7) D Sep 5, 2026
e*t*r*e*.at (WP 6.2.11) F Sep 5, 2026
t*e*d*t*a*a*a*t*l*a.com (WP 7.1) F Sep 5, 2026
b*z*e*.jp (WP 6.8.8) D Sep 5, 2026
r*f*n*t*c*a*h*n*.com (WP 6.9.7) F Sep 5, 2026
h*l*o*a*f*i*.com (WP 7.1) F Sep 5, 2026
e*o*e*g*e.org F Sep 5, 2026
k*k*m*i*b*r*e*.com (WP 5.2.21) F Sep 5, 2026
v*a*i*y.de (WP 7.1) F Sep 5, 2026
k*a*m*g*s*e*i*l*s*.com (WP 7.1) F Sep 5, 2026
t*e*d*f*l*p*i*.com (WP 5.8.15) C Sep 5, 2026
h*l*o*e*a*d*n*e*.com (WP 7.1) F Sep 5, 2026
e*e*t*o*t*l*.com (WP 7.1) A Sep 5, 2026

Top 50 Plugins

Plugin Count
elementor 1,718,857
contact-form-7 1,715,107
elementor-pro 1,024,535
woocommerce 794,067
revslider 589,808
jetpack 421,101
js_composer 406,493
wp-rocket 323,311
essential-addons-for-elementor-lite 255,642
google-site-kit 255,241
gravityforms 251,714
complianz-gdpr 251,192
cookie-law-info 222,410
instagram-feed 218,806
sitepress-multilingual-cms 206,037
header-footer-elementor 198,827
google-analytics-for-wordpress 197,771
bluehost-wordpress-plugin 188,879
elementskit-lite 172,624
gutenberg 150,469
litespeed-cache 144,963
cookie-notice 143,896
gutenberg-core 128,828
gtranslate 120,251
the-events-calendar 119,698
wpforms-lite 117,426
astra-sites 107,638
popup-maker 106,357
woocommerce-payments 103,866
tablepress 101,449
honeypot 96,124
astra-addon 90,946
duracelltomi-google-tag-manager 87,998
coblocks 87,870
wp-smushit 87,755
layerslider 86,142
all-in-one-seo-pack 85,727
bb-plugin 84,499
ml-slider 82,011
akismet 81,090
premium-addons-for-elementor 79,979
cleantalk-spam-protect 79,874
megamenu 78,502
mailchimp-for-wp 78,318
ewww-image-optimizer 76,691
wp-pagenavi 76,438
jet-engine 76,202
fusion-builder 75,147
smart-slider-3 74,018
gravityformsrecaptcha 72,727

Top 50 Themes

Theme Count
hello-elementor 606,212
Divi 480,849
astra 399,444
flatsome 146,324
Avada 117,981
generatepress 111,785
pub 89,179
oceanwp 77,588
kadence 77,330
enfold 66,672
salient 63,159
twentyseventeen 52,714
bb-theme 51,571
twentytwentyfour 51,303
betheme 51,267
cocoon-master 49,806
blocksy 49,401
twentytwentyfive 45,981
woodmart 44,867
h4 44,842
dt-the7 44,323
neve 36,868
Avada-Child-Theme 36,372
gox 35,833
lightning 30,826
bridge 30,214
twentytwentyone 29,209
swell 29,170
twentytwenty 27,859
bricks 26,832
Impreza 25,422
Newspaper 23,501
twentytwentythree 21,153
epik-redesign 18,814
twentytwentytwo 18,020
uncode 17,966
twentysixteen 17,180
pro 17,085
sydney 15,694
storefront 15,589
Total 14,039
factory-templates-4 13,905
hello-theme-child-master 13,540
themify-ultra 13,177
hestia 12,243
yootheme 12,232
yith-wonder 11,662
jupiter 11,553
twentyfifteen 11,520
porto 11,507