WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: duracelltomi-google-tag-manager (Used by 88,349 domains)

Security snapshot

Across the 88,406 duracelltomi-google-tag-manager sites we've scanned, compared to the all-WordPress average.

Grade A 3% Grade B 4% Grade C 6% Grade D 12% Grade F 76%
Fail the header check (F)76%vs 82.6% avg
Leak usernames27%vs 38.5% avg
Expose a sensitive file2.7%vs 1.8% avg
Use HTTPS97%vs 96.1% avg

GTM4WP – A Google Tag Manager (GTM) plugin for WordPress

Google Tag Manager (GTM) is Google’s free tool for everyone to manage and deploy analytics and marketing tags as well as other code snippets
using an intuitive web UI. To learn more about this tool, visit the official website.

This plugin places the GTM container code snippets onto your WordPress website so that you do not need to add it manually.
Multiple containers are also supported!

The plugin complements your GTM setup by pushing page meta data and user information into the so called data layer.
Google’s official help pages includes more details about the data layer.

PHP 7.4 is required to use this plugin.

GTM container code placement

The original GTM container code is divided into two parts:

The first part is a javascript code snippet that is added to the section of every page of the website.
This part is critical to enable all features of GTM, and this plugin helps to place this part
correctly on your site.

The second part is an iframe snippet that acts as a failsafe/fallback should users’ JavaScript be disabled.
Google recommends – for best performance – to place this code snippet directly after the opening tag on each page.

Albeit not ideal, it will work when placed lower in the code. This plugin provides a code placement option for the second code snippet.

If your WordPress theme is compatible with the additions of WordPress 5.2 then this plugin will place this second code to the right place.
Users of the Genisis theme, GeneratePress theme, Elementor, Oxygen Builder and Beaver Builder Theme will also have this placed correctly.
To utilize this, set the compatibility mode in plugin options to off.

All other users can place this second code snippet using a custom PHP code (“Manually coded” option) or select the so called “Footer” option to
add the code lower in the code (it is not the recommended way but will work)

Basic data included

  • post/page titles
  • post/page dates
  • post/page category names
  • post/page tag names
  • post/page author ID and name
  • post/page ID
  • post types
  • post format
  • post count on the current page + in the current category/tag/taxonomy
  • custom terms associated with any post type
  • logged in status
  • logged in user role
  • logged in user ID (to track cross device behaviour in Google Analytics)
  • logged in user email address (both unhashed and SHA256 hased values to be used with tracking)
  • logger in user creation date
  • site search data
  • site name and id (for WordPress multisite instances)
  • IP address of the visitor (please use the explicit consent of the visitor to utilize this)

Browser / OS / Device data

  • browser data (name, version, engine)
  • OS data (name, version)
  • device data (type, manufacturer, model)

Data is provided using the WhichBrowser library: http://whichbrowser.net/

Weather data

(beta)

Push data about users’ current weather conditions into the dataLayer. This can be used to generate weather-related
audience/remarketing lists on ad platforms and allows for user segmentation in your web analytics solutions:

  • weather category (clouds, rain, snow, etc.)
  • weather description: more detailed data
  • temperature in Celsius or Fahrenheit
  • air pressure
  • wind speed and degrees

Weather data is queried from Open Weather Map. Depending on your websites traffic, additional fees may apply:
http://openweathermap.org/price

An (free) API key from OpenWeatherMap is required for this feature to work.

ipstack.com is used to determine the site visitor’s location. A (free) API key from IPStack.com is required for this feature to work:
https://ipstack.com/product

Media player events

(experimental)

Track users’ interaction with any embedded media:

  • YouTube
  • Vimeo
  • Soundcloud

DataLayer events can be chosen to fire upon media player load, media is being played, paused/stopped and optionally when
the user reaches 10, 20, 30, …, 90, 100% of the media duration.

Tracking is supported for embedded media using the built-in oEmbed feature of WordPress as well as most other media plugins
and copy/pasted codes. Players injected into the website after page load are not currently supported.

Scroll tracking

Fire tags based on how the visitor scrolls from the top to the bottom of a page.
An example would be to separate “readers” (who spend a specified amount of time on a page) from “scrollers”
(who only scroll through within seconds). You can use these events to fire Analytics tags and/or remarketing/conversion tags
(for micro conversions).

Scroll tracking is based on the solution originally created by

  • Nick Mihailovski
  • Thomas Baekdal
  • Avinash Kaushik
  • Joost de Valk
  • Eivind Savio
  • Justin Cutroni

Original script:
http://cutroni.com/blog/2012/02/21/advanced-content-tracking-with-google-analytics-part-1/

Blacklist & Whitelist Tag Manager tags, triggers and variables

To increase website security, you have the option to white- and blacklist tags/triggers/variables.
You can prevent specific tags from firing or the use of certain variable types regardless of your GTM setup.

If the Google account associated with your GTM account is being hacked, an attacker could easily
execute malware on your website without accessing its code on your hosting server. By blacklisting custom HTML tags
and/or custom JavaScript variables you can secure the Tag Manager container.

Integration

Google Tag Manager for WordPress integrates with several popular plugins. More integration to come!

  • Contact Form 7: fire an event when a Contact Form 7 form was submitted with any result (mail sent, mail failed, spam detected, invalid input)
  • WooCommerce:
    • Implementation of GA4 E-commerce
    • Does not support promotions since WooCommerce does not have such a feature (yet)
    • Does not support refunds
    • Compatibility with High Performance Order Storage (HPOS)
  • AMP: load your AMP container on the AMP version of your pages
  • Cookiebot: use automatic cookie blocking mode if needed
  • Google Consent Mode v2: fire the “default” command with specific consent flags to integrat with non-certified Consent Management Platforms (CMPs) and plugins.

Server side containers

If you are using a server side container
you can enter your custom domain name and custom path to load gtm.js from your there.

Exclude specific user roles from being tracked

You can set which user roles needs to be excluded from tracking when a user with that role visits the frontend. This will completely disable the container code for that user.

DomainExposuresHeadersLast Checked
e*h*l*n*a*m*n*s.com (WP 7.1) F Sep 3, 2026
o*g*z*o.com (WP 6.7.7) F Sep 3, 2026
h*w*s*o*e*i*e*a*d*.com B Sep 3, 2026
z*s*a*u*t*.com (WP 6.7.7) F Sep 3, 2026
c*s*o*s*a*t*p*.com (WP 7.1) F Sep 3, 2026
s*o*s*a*a*c*l*n*.com (WP 6.9.7) F Sep 3, 2026
e*h*l*n.com (WP 7.1) F Sep 3, 2026
x*-*l*s*o*-*x*.com (WP 6.6.7) F Sep 3, 2026
x*-*l*-*h*p*9*a.com (WP 6.6.7) F Sep 3, 2026
x*-*m*c*x*i*o*3*c*6*2*3*7*d.com (WP 6.4.2) F Sep 3, 2026
c*s*o*r*i*h*t*l*e*c*r*s.com (WP 6.8.1) F Sep 3, 2026
m*r*y*a*t*.com F Sep 3, 2026
c*s*o*q*o*e*e*k.com F Sep 3, 2026
w*k*p*c*.c*.uk (WP 7.1) F Sep 3, 2026
h*r*e*l*t*e*c*n*r*s.nl F Sep 3, 2026
z*l*e*s*i*k*r*f*e*r*a*s.de (WP 7.1) F Sep 3, 2026
t*l*a*a*i*n*p*r*a*.com F Sep 3, 2026
h*p*s*r*a*a*e*y.cz F Sep 3, 2026
s*a*i*p*a*u*.eu F Sep 3, 2026
n*u*a*e.com (WP 5.7.17) F Sep 3, 2026
h*w*s*n*i*e*.com (WP 7.1) F Sep 3, 2026
n*u*l*g*n*e.com F Sep 3, 2026
t*d*e*u*p*e*t*t*.com (WP 5.9.4) F Sep 3, 2026
z*r*s*p*r*n*r*.com F Sep 3, 2026
z*r*s*d*s*r*b*t*r*.com F Sep 3, 2026
b*u*e*r*h*o*n*y*i*t*r*.com F Sep 3, 2026
r*n*e*p*o*.net (WP 7.0.4) C Sep 3, 2026
p*r*m*r*e*i*g.c*m.mx (WP 7.1) F Sep 3, 2026
d*g*t*l*.c*m.tr C Sep 3, 2026
i*e*e*l*.com (WP 7.1) F Sep 3, 2026
c*s*o*c*a*a*i*n.c*.uk F Sep 3, 2026
l*e*s*a*e*.nl (WP 7.1) F Sep 3, 2026
b*u*d*c*h*n*i*r*f*s.com F Sep 3, 2026
o*d*r*t*o.com F Sep 3, 2026
x*-*l*g*o*m*n*5*a.com F Sep 3, 2026
a*a*i*g*o*i*e*o*e*.com (WP 7.1) F Sep 3, 2026
c*s*o*p*r*o*a*u*l*e*.com (WP 7.1) D Sep 3, 2026
b*u*d*e*m*a*d.com (WP 7.1) F Sep 3, 2026
q*a*p*a*.c*m.au F Sep 3, 2026
a*s*s*a*b*n*o*l*n*.com (WP 6.9.7) F Sep 3, 2026
t*c*e*t*l*.com F Sep 3, 2026
t*c*a*c*s.c*m.br F Sep 3, 2026
o*c*m*s*a*e*h*i*s.com (WP 7.1) F Sep 3, 2026
o*c*m*s*a*e*h*i*.com (WP 7.1) F Sep 3, 2026
o*c*c*a*r*.com (WP 7.1) F Sep 3, 2026
j*c*i*s*r*n*e.ca (WP 6.9.7) C Sep 3, 2026
d*m*n*i*a*z*e*m*r*w*l*b*i*g*e*w*r*.com A Sep 3, 2026
m*r*y*e*c*r.com C Sep 3, 2026
a*a*t*k*.c*m.co F Sep 3, 2026
h*w*e*e*e*d*m*x.com D Sep 3, 2026
e*i*e*.fr (WP 6.6.4) F Sep 3, 2026
s*v*1*e*s*n.org (WP 6.7.2) F Sep 3, 2026
s*v*1*e*s*n.net (WP 6.7.2) F Sep 3, 2026
a*s*o*t*r*.com C Sep 3, 2026
a*g*l*i*h*h*r*p*.com F Sep 3, 2026
m*r*a*c*s*e*i*s.com (WP 6.7.2) F Sep 3, 2026
p*u*e*t*z*u*e*.pl F Sep 3, 2026
m*r*s*o*b*.com (WP 7.1) F Sep 3, 2026
h*w*e*e*h.com (WP 6.9.7) F Sep 3, 2026
h*i*s*i*u*e.pl F Sep 3, 2026
e*g*l*b*l.com A Sep 3, 2026
e*g*n*r*i*e*.com F Sep 3, 2026
d*l*e*b*h*t*a*e*a*-*o*e*.com (WP 6.8.8) F Sep 3, 2026
n*u*i*h*v.com F Sep 3, 2026
b*u*d*a*o*d*n*.com F Sep 3, 2026
c*s*o*m*d*a*s*o*i*t*s.com F Sep 3, 2026
k*w*r*h*c*e*n*i*-*u*n*n*s*n*a*i*n*.com (WP 7.1) D Sep 3, 2026
a*a*i*g*e*l*7*6.com (WP 7.0.4) F Sep 3, 2026
c*s*o*l*x*c*.com F Sep 3, 2026
c*s*o*l*g*c*s*s.com (WP 7.1) F Sep 3, 2026
o*a*e*i*e*t.com A Sep 3, 2026
a*a*i*g*o*b*s*s*.com F Sep 3, 2026
a*s*u*i*v*s*a*.com F Sep 3, 2026
x*-*l*i*n*r*g*t*r*4*b.com F Sep 3, 2026
a*s*h*r*e*l*x*r*.com (WP 7.1) F Sep 3, 2026
a*s*y*o*a*.com F Sep 3, 2026
s*n*p*u*b*.com (WP 7.1) F Sep 2, 2026
n*u*i*h*d*f.com (WP 7.0.4) D Sep 2, 2026
e*g*b*x.com (WP 6.6.7) F Sep 2, 2026
x*-*l*a*l*o*o*m*a.com (WP 7.0.4) F Sep 2, 2026
g*r*e*l*n*o*t*o*a*d*e.nl F Sep 2, 2026
c*s*o*l*s*e*a*g*f*s.com B Sep 2, 2026
s*o*f*o*.com (WP 6.3.8) F Sep 2, 2026
r*-*a*r*d*s*g*-*h*z*o*a.com F Sep 2, 2026
a*r*l*k*.com (WP 6.8.8) F Sep 2, 2026
b*y*n*t*e*h*l*.ca A Sep 2, 2026
z*r*p*r.com F Sep 2, 2026
k*w*n*o*d.com (WP 6.1.12) D Sep 2, 2026
m*r*i*y*l*.com F Sep 2, 2026
f*s*i*n*n*b*a*t*w*r*d.com (WP 7.1) F Sep 2, 2026
k*p*j*m*m.pl (WP 7.1) F Sep 2, 2026
a*p*a*s*h*o*.jp F Sep 2, 2026
a*p*a*9*9.jp (WP 6.4.10) F Sep 2, 2026
t*r*a*a.lt F Sep 2, 2026
c*s*o*i*e*s*l*s*r*i*i*g.com F Sep 2, 2026
o*a*a*t*r*s.com (WP 7.1) D Sep 2, 2026
s*n*a*h*f*r.com D Sep 2, 2026
e*f*p*r*n*i*e*h*p*.com C Sep 2, 2026
c*o*e*-*u*t*r.net D Sep 2, 2026
s*o*a*i*u*r*c*.com F Sep 2, 2026

Top 50 Plugins

Plugin Count
elementor 1,730,294
contact-form-7 1,721,189
elementor-pro 1,030,363
woocommerce 798,979
revslider 592,001
jetpack 433,801
js_composer 408,403
wp-rocket 326,504
essential-addons-for-elementor-lite 257,565
gravityforms 252,497
complianz-gdpr 252,176
google-site-kit 250,288
cookie-law-info 223,276
instagram-feed 219,874
sitepress-multilingual-cms 206,469
header-footer-elementor 200,528
google-analytics-for-wordpress 199,243
bluehost-wordpress-plugin 189,453
elementskit-lite 174,206
gutenberg 160,513
litespeed-cache 145,284
cookie-notice 144,599
gutenberg-core 140,377
gtranslate 120,852
the-events-calendar 120,446
wpforms-lite 118,547
astra-sites 108,826
popup-maker 106,886
woocommerce-payments 105,641
tablepress 101,273
honeypot 96,491
coblocks 93,600
astra-addon 91,421
duracelltomi-google-tag-manager 88,349
wp-smushit 88,315
layerslider 86,499
all-in-one-seo-pack 86,350
bb-plugin 84,791
akismet 82,203
ml-slider 82,176
premium-addons-for-elementor 80,773
cleantalk-spam-protect 80,289
mailchimp-for-wp 78,871
megamenu 78,680
ewww-image-optimizer 76,849
wp-pagenavi 76,546
jet-engine 76,523
fusion-builder 75,403
smart-slider-3 74,324
gravityformsrecaptcha 72,802

Top 50 Themes

Theme Count
hello-elementor 609,589
Divi 483,496
astra 402,734
flatsome 145,249
Avada 118,421
generatepress 112,290
pub 97,125
oceanwp 78,141
kadence 77,731
enfold 67,008
salient 63,381
twentyseventeen 53,013
twentytwentyfour 51,847
bb-theme 51,765
betheme 51,513
cocoon-master 49,979
blocksy 49,828
h4 48,819
twentytwentyfive 45,534
woodmart 44,843
dt-the7 44,448
neve 37,089
Avada-Child-Theme 36,459
gox 35,905
lightning 30,747
bridge 30,345
twentytwentyone 29,418
swell 29,198
twentytwenty 28,015
bricks 26,800
Impreza 25,536
Newspaper 23,668
twentytwentythree 21,364
epik-redesign 18,852
twentytwentytwo 18,186
uncode 18,019
twentysixteen 17,305
pro 17,228
sydney 15,747
storefront 15,733
Total 14,105
factory-templates-4 13,883
hello-theme-child-master 13,651
themify-ultra 12,716
hestia 12,288
yootheme 12,275
yith-wonder 11,711
jupiter 11,589
porto 11,548
twentyfifteen 11,531