WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Plugin: duracelltomi-google-tag-manager (Used by 110,512 domains)

GTM4WP – A Google Tag Manager (GTM) plugin for WordPress

πŸ‘€ Thomas Geiger πŸ“¦ v1.22.3 πŸ”— Plugin Homepage

Google Tag Manager (GTM) is Google’s free tool for everyone to manage and deploy analytics and marketing tags as well as other code snippets
using an intuitive web UI. To learn more about this tool, visit the official website.

This plugin places the GTM container code snippets onto your WordPress website so that you do not need to add it manually.
Multiple containers are also supported!

The plugin complements your GTM setup by pushing page meta data and user information into the so called data layer.
Google’s official help pages includes more details about the data layer.

PHP 7.4 is required to use this plugin.

GTM container code placement

The original GTM container code is divided into two parts:

The first part is a javascript code snippet that is added to the section of every page of the website.
This part is critical to enable all features of GTM, and this plugin helps to place this part
correctly on your site.

The second part is an iframe snippet that acts as a failsafe/fallback should users’ JavaScript be disabled.
Google recommends – for best performance – to place this code snippet directly after the opening tag on each page.

Albeit not ideal, it will work when placed lower in the code. This plugin provides a code placement option for the second code snippet.

If your WordPress theme is compatible with the additions of WordPress 5.2 then this plugin will place this second code to the right place.
Users of the Genisis theme, GeneratePress theme, Elementor, Oxygen Builder and Beaver Builder Theme will also have this placed correctly.
To utilize this, set the compatibility mode in plugin options to off.

All other users can place this second code snippet using a custom PHP code (β€œManually coded” option) or select the so called β€œFooter” option to
add the code lower in the code (it is not the recommended way but will work)

Basic data included

  • post/page titles
  • post/page dates
  • post/page category names
  • post/page tag names
  • post/page author ID and name
  • post/page ID
  • post types
  • post format
  • post count on the current page + in the current category/tag/taxonomy
  • custom terms associated with any post type
  • logged in status
  • logged in user role
  • logged in user ID (to track cross device behaviour in Google Analytics)
  • logged in user email address (both unhashed and SHA256 hased values to be used with tracking)
  • logger in user creation date
  • site search data
  • site name and id (for WordPress multisite instances)
  • IP address of the visitor (please use the explicit consent of the visitor to utilize this)

Browser / OS / Device data

  • browser data (name, version, engine)
  • OS data (name, version)
  • device data (type, manufacturer, model)

Data is provided using the WhichBrowser library: http://whichbrowser.net/

Weather data

(beta)

Push data about users’ current weather conditions into the dataLayer. This can be used to generate weather-related
audience/remarketing lists on ad platforms and allows for user segmentation in your web analytics solutions:

  • weather category (clouds, rain, snow, etc.)
  • weather description: more detailed data
  • temperature in Celsius or Fahrenheit
  • air pressure
  • wind speed and degrees

Weather data is queried from Open Weather Map. Depending on your websites traffic, additional fees may apply:
http://openweathermap.org/price

An (free) API key from OpenWeatherMap is required for this feature to work.

ipstack.com is used to determine the site visitor’s location. A (free) API key from IPStack.com is required for this feature to work:
https://ipstack.com/product

Media player events

(experimental)

Track users’ interaction with any embedded media:

  • YouTube
  • Vimeo
  • Soundcloud

DataLayer events can be chosen to fire upon media player load, media is being played, paused/stopped and optionally when
the user reaches 10, 20, 30, …, 90, 100% of the media duration.

Tracking is supported for embedded media using the built-in oEmbed feature of WordPress as well as most other media plugins
and copy/pasted codes. Players injected into the website after page load are not currently supported.

Scroll tracking

Fire tags based on how the visitor scrolls from the top to the bottom of a page.
An example would be to separate β€œreaders” (who spend a specified amount of time on a page) from β€œscrollers”
(who only scroll through within seconds). You can use these events to fire Analytics tags and/or remarketing/conversion tags
(for micro conversions).

Scroll tracking is based on the solution originally created by

  • Nick Mihailovski
  • Thomas Baekdal
  • Avinash Kaushik
  • Joost de Valk
  • Eivind Savio
  • Justin Cutroni

Original script:
http://cutroni.com/blog/2012/02/21/advanced-content-tracking-with-google-analytics-part-1/

Blacklist & Whitelist Tag Manager tags, triggers and variables

To increase website security, you have the option to white- and blacklist tags/triggers/variables.
You can prevent specific tags from firing or the use of certain variable types regardless of your GTM setup.

If the Google account associated with your GTM account is being hacked, an attacker could easily
execute malware on your website without accessing its code on your hosting server. By blacklisting custom HTML tags
and/or custom JavaScript variables you can secure the Tag Manager container.

Integration

Google Tag Manager for WordPress integrates with several popular plugins. More integration to come!

  • Contact Form 7: fire an event when a Contact Form 7 form was submitted with any result (mail sent, mail failed, spam detected, invalid input)
  • WooCommerce:
    • Implementation of GA4 E-commerce
    • Does not support promotions since WooCommerce does not have such a feature (yet)
    • Does not support refunds
    • Compatibility with High Performance Order Storage (HPOS)
  • AMP: load your AMP container on the AMP version of your pages
  • Cookiebot: use automatic cookie blocking mode if needed
  • Google Consent Mode v2: fire the β€œdefault” command with specific consent flags to integrat with non-certified Consent Management Platforms (CMPs) and plugins.

Server side containers

If you are using a server side container
you can enter your custom domain name and custom path to load gtm.js from your there.

Exclude specific user roles from being tracked

You can set which user roles needs to be excluded from tracking when a user with that role visits the frontend. This will completely disable the container code for that user.

DomainExposuresHeadersLast Checked
r*o*e*r*m*n*e*s.com βœ… F 2026-04-25 15:29:46
o*o*o*y*a*.com (WP 6.9.4) βœ… F 2026-04-25 15:28:59
t*x*s*v*.org βœ… F 2026-04-25 15:28:09
n*a*n*.org βœ… D 2026-04-25 15:27:58
b*o*.bondview.com (WP 6.9) βœ… C 2026-04-25 15:27:17
w*l*f*.fr (WP 6.9.4) βœ… F 2026-04-25 15:26:44
t*e*e*o*o*n.com βœ… A 2026-04-25 15:26:34
i*p*.uthscsa.edu βœ… F 2026-04-25 15:26:12
v*o*o*-*o*f*e.com (WP 6.9.4) βœ… F 2026-04-25 15:26:10
e*n*b*l.nl (WP 6.9.4) βœ… F 2026-04-25 15:24:17
p*o*o*f*c*.it (WP 6.9.4) βœ… F 2026-04-25 15:24:13
y*m*a*a.es βœ… F 2026-04-25 15:24:12
c*l*e*s.com (WP 6.9.4) βœ… F 2026-04-25 15:23:29
k*i*h*s*l*b.vip βœ… F 2026-04-25 15:22:54
d*n*a*s*l*t*c*.com βœ… F 2026-04-25 15:22:45
i*l*b*.com (WP 6.9.4) βœ… F 2026-04-25 15:21:08
s*n*c*e*.com.sg (WP 6.9.4) βœ… A 2026-04-25 15:21:06
n*t*r*l*a*i*.es (WP 5.5.15) ⚠️ F 2026-04-25 15:20:26
s*t*c*a.es βœ… C 2026-04-25 15:20:25
n*v*h*r*z*n*e.pt (WP 6.9.4) βœ… F 2026-04-25 15:20:25
a*u*m*n*o*a.com (WP 6.6.5) βœ… F 2026-04-25 15:19:29
t*a*h*r*e*t*f*c*t*o*z*n*.com βœ… F 2026-04-25 15:19:09
i*s*o*e.es (WP 6.9.4) βœ… F 2026-04-25 15:17:10
e*o*o*u*i*n*s*u*m*c*s.es βœ… F 2026-04-25 15:16:44
m*n*s*.com (WP 6.9.4) βœ… F 2026-04-25 15:16:44
b*a*t*-*a*r*.com.pl (WP 6.9.4) βœ… F 2026-04-25 15:16:19
i*k*y*.com (WP 6.9.1) βœ… D 2026-04-25 15:16:16
r*o*e*m.com (WP 5.3.2) ⚠️ F 2026-04-25 15:15:44
l*m*n*s*-*f*i*i*l.com (WP 6.5.8) βœ… F 2026-04-25 15:13:45
h*o*e.fr (WP 6.9.4) βœ… F 2026-04-25 15:13:44
m*i*o*-*o*s*-*x*o.fr βœ… D 2026-04-25 15:13:44
i*r*m*l*r*u*m.de βœ… F 2026-04-25 15:13:43
f*a*h*i*i*d*a.com (WP 6.8.2) βœ… D 2026-04-25 15:13:00
d*n*h*c*.com (WP 6.8.5) βœ… F 2026-04-25 15:11:49
m*z*l*y.com βœ… F 2026-04-25 15:10:57
m*z*l*i*.com βœ… F 2026-04-25 15:10:57
m*z*l*i.com βœ… F 2026-04-25 15:10:57
o*n*a*n*.com (WP 6.9.4) βœ… D 2026-04-25 15:10:23
l*m*n*r*i*.com βœ… A 2026-04-25 15:09:10
t*a*h*a*h*t*d*n*.com βœ… F 2026-04-25 15:09:05
p*e*c*t*p*r*.org βœ… A 2026-04-25 15:07:58
r*o*s*k*.fi (WP 6.8.5) βœ… F 2026-04-25 15:07:57
b*t*e*w*t*r*r*n*.org (WP 6.9.4) βœ… D 2026-04-25 15:07:57
r*o*c*n*l*b.com βœ… F 2026-04-25 15:07:46
m*e*a*d*o.es (WP 6.9.4) βœ… F 2026-04-25 15:07:30
t*e*e*h*u*e*o*l*c*i*n.com βœ… F 2026-04-25 15:06:45
t*e*e*p*d*g.com (WP 6.9.4) βœ… F 2026-04-25 15:06:45
t*e*e*p*h*r*a*i*t.com βœ… A 2026-04-25 15:06:45
t*e*e*p*o*t*r.com βœ… C 2026-04-25 15:06:44
c*l*l*w*r*d.com (WP 6.9.4) βœ… F 2026-04-25 15:06:16
o*n*a*g*r*t*v*l*e*e*o*t*r*n*e*e*c*.com βœ… F 2026-04-25 15:05:53
o*n*o*e.com (WP 6.9.4) βœ… F 2026-04-25 15:05:52
t*a*h*t*l*.com βœ… F 2026-04-25 15:04:51
r*s*y*n*.hr βœ… F 2026-04-25 15:04:39
h*g*e*e*b*o*e*h.fr πŸ”“ D 2026-04-25 15:03:08
p*e*i*r*a*.fr (WP 5.6.17) ⚠️ F 2026-04-25 15:03:08
s*l*t*o*-*o*v*.fr (WP 6.9.4) βœ… F 2026-04-25 15:03:07
p*a*t*c*r*e*e*t*f*c*t*o*.org (WP 6.7.5) βœ… F 2026-04-25 15:02:40
e*-*s.org (WP 6.9.4) βœ… F 2026-04-25 15:02:39
e*i*e*c*.ch βœ… F 2026-04-25 15:02:38
a*r*a*e.fr βœ… F 2026-04-25 15:01:02
a*u*a*k*.com βœ… F 2026-04-25 15:00:09
u*a*i*.co.za βœ… F 2026-04-25 14:59:51
b*n*n*p*n*a.com (WP 6.9.4) βœ… F 2026-04-25 14:59:50
g*a*i*s*i*d*n.com (WP 6.9.4) βœ… F 2026-04-25 14:59:39
f*a*h*a*d*a*d*t*t*o*e*y.com βœ… F 2026-04-25 14:55:33
i*i*p*r*o*a*c*r*.com (WP 6.9.4) βœ… F 2026-04-25 14:54:45
i*i*p*t*n*.com (WP 4.9.26) ⚠️ F 2026-04-25 14:54:44
i*i*o*b*a*d.com βœ… F 2026-04-25 14:54:44
t*e*e*g*t*o*a*s*i*.com βœ… F 2026-04-25 14:54:30
m*x*d*s*g*s.com βœ… D 2026-04-25 14:53:57
m*w*e*.com (WP 6.9.3) βœ… F 2026-04-25 14:53:57
l*u*r*d*f*e*-*r*a*h*e*e.de (WP 6.9.4) βœ… F 2026-04-25 14:53:37
a*p*r*g*a*s.co.uk (WP 6.9.4) βœ… D 2026-04-25 14:52:22
s*o*t*l*e.tv βœ… F 2026-04-25 14:51:54
c*i*a*o*a*e*n*c*e.org βœ… C 2026-04-25 14:51:54
p*o*e*t*r*o*n*.co.uk (WP 6.8.5) βœ… A 2026-04-25 14:51:37
m*n*t*s*i*s.com (WP 6.9.4) βœ… F 2026-04-25 14:51:05
o*n*r*n*i*e.com βœ… F 2026-04-25 14:49:13
a*a*a*e*f*r.pl (WP 6.9.4) βœ… F 2026-04-25 14:49:04
f*a*h*a*k*c*e*n*n*.com βœ… F 2026-04-25 14:48:42
e*e*g*d*g*t*l.co (WP 6.9.4) βœ… F 2026-04-25 14:48:31
m*n*t*a*p*l*n.com (WP 6.9.4) βœ… B 2026-04-25 14:47:56
m*n*t*y*u*.com (WP 6.9.4) βœ… F 2026-04-25 14:47:56
m*n*t*w*p*r*y.com βœ… F 2026-04-25 14:47:56
m*n*t*a*s.com βœ… F 2026-04-25 14:47:55
l*m*n*t*o*s*r*u*.com (WP 5.6.17) ⚠️ πŸ”“ F 2026-04-25 14:47:52
l*m*n*t*o*g*o*p.com (WP 5.6.17) ⚠️ F 2026-04-25 14:47:52
l*m*n*t*d*t*.com βœ… F 2026-04-25 14:47:51
g*f*o*r*n*.it (WP 6.9.4) βœ… F 2026-04-25 14:46:00
a*a*i*e.nl βœ… F 2026-04-25 14:46:00
t*a*t*v*r*.com (WP 6.8.2) βœ… F 2026-04-25 14:44:55
g*c.org βœ… B 2026-04-25 14:44:51
f*e*t*d*y.nl (WP 6.9.4) βœ… B 2026-04-25 14:44:51
p*e*c.org βœ… A 2026-04-25 14:44:50
b*r*s*a.qodeinteractive.com (WP 6.0.11) ⚠️ F 2026-04-25 14:44:11
t*e*e*t*n*s*o*t*.com (WP 6.9.4) βœ… D 2026-04-25 14:43:26
m*n*s*n*a*n*n*c*u*s.com (WP 6.8.3) βœ… F 2026-04-25 14:43:26
a*a*b*.org (WP 6.9.4) βœ… D 2026-04-25 14:43:07
o*n*r*i*s*t*.com βœ… F 2026-04-25 14:41:23

Top 50 Plugins

Plugin Count
elementor 2,689,650
contact-form-7 2,396,617
elementor-pro 1,506,769
woocommerce 1,263,184
revslider 900,874
js_composer 585,320
jetpack 495,106
wp-rocket 425,276
essential-addons-for-elementor-lite 406,312
header-footer-elementor 350,600
gutenberg-core 340,999
elementskit-lite 329,875
instagram-feed 306,189
google-analytics-for-wordpress 304,458
gravityforms 301,146
google-site-kit 293,903
complianz-gdpr 290,675
cookie-law-info 287,278
sitepress-multilingual-cms 251,111
wpforms-lite 247,744
astra-sites 240,555
bluehost-wordpress-plugin 237,739
litespeed-cache 216,201
gtranslate 178,916
coblocks 172,479
cookie-notice 167,412
gutenberg 162,150
the-events-calendar 146,892
popup-maker 138,606
premium-addons-for-elementor 131,869
astra-addon 131,117
bb-plugin 130,405
mailchimp-for-wp 128,339
LayerSlider 126,156
wp-smushit 124,547
tablepress 119,081
custom-fonts 118,009
creame-whatsapp-me 116,783
pro-elements 113,892
click-to-chat-for-whatsapp 111,260
duracelltomi-google-tag-manager 110,538
woocommerce-gateway-stripe 109,936
cleantalk-spam-protect 107,359
akismet 104,633
smart-slider-3 104,583
pixelyoursite 102,539
megamenu 101,995
honeypot 101,796
fusion-builder 101,539
royal-elementor-addons 99,229

Top 50 Themes

Theme Count
hello-elementor 860,771
astra 714,204
Divi 705,878
pub 227,065
generatepress 161,551
flatsome 161,149
Avada 152,832
h4 140,620
oceanwp 118,254
kadence 104,836
enfold 89,410
salient 86,415
bb-theme 83,587
twentytwentyfour 80,980
blocksy 78,999
twentytwentyfive 77,771
cocoon-master 74,803
betheme 71,088
twentyseventeen 69,057
woodmart 59,353
dt-the7 58,366
neve 51,292
twentytwentyone 44,388
bridge 43,520
swell 39,789
Avada-Child-Theme 39,358
twentytwenty 38,238
lightning 37,551
gox 37,081
twentytwentythree 36,862
bricks 30,943
Impreza 30,905
Newspaper 28,928
twentytwentytwo 28,430
epik-redesign 24,137
extendable 23,397
pro 23,325
storefront 23,293
uncode 22,749
yith-wonder 22,415
twentysixteen 22,303
sydney 21,246
themify-ultra 20,762
Total 19,056
twentyfifteen 18,819
porto 17,524
hestia 16,904
thrive-theme 16,130
yootheme 15,740
twentynineteen 15,471