WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: duracelltomi-google-tag-manager (Used by 88,265 domains)

Security snapshot

Across the 88,281 duracelltomi-google-tag-manager sites we've scanned, compared to the all-WordPress average.

Grade A 3% Grade B 4% Grade C 6% Grade D 12% Grade F 76%
Fail the header check (F)76%vs 82.6% avg
Leak usernames27%vs 38.5% avg
Expose a sensitive file2.7%vs 1.8% avg
Use HTTPS97%vs 96.1% avg

GTM4WP – A Google Tag Manager (GTM) plugin for WordPress

Google Tag Manager (GTM) is Google’s free tool for everyone to manage and deploy analytics and marketing tags as well as other code snippets
using an intuitive web UI. To learn more about this tool, visit the official website.

This plugin places the GTM container code snippets onto your WordPress website so that you do not need to add it manually.
Multiple containers are also supported!

The plugin complements your GTM setup by pushing page meta data and user information into the so called data layer.
Google’s official help pages includes more details about the data layer.

PHP 7.4 is required to use this plugin.

GTM container code placement

The original GTM container code is divided into two parts:

The first part is a javascript code snippet that is added to the section of every page of the website.
This part is critical to enable all features of GTM, and this plugin helps to place this part
correctly on your site.

The second part is an iframe snippet that acts as a failsafe/fallback should users’ JavaScript be disabled.
Google recommends – for best performance – to place this code snippet directly after the opening tag on each page.

Albeit not ideal, it will work when placed lower in the code. This plugin provides a code placement option for the second code snippet.

If your WordPress theme is compatible with the additions of WordPress 5.2 then this plugin will place this second code to the right place.
Users of the Genisis theme, GeneratePress theme, Elementor, Oxygen Builder and Beaver Builder Theme will also have this placed correctly.
To utilize this, set the compatibility mode in plugin options to off.

All other users can place this second code snippet using a custom PHP code (“Manually coded” option) or select the so called “Footer” option to
add the code lower in the code (it is not the recommended way but will work)

Basic data included

  • post/page titles
  • post/page dates
  • post/page category names
  • post/page tag names
  • post/page author ID and name
  • post/page ID
  • post types
  • post format
  • post count on the current page + in the current category/tag/taxonomy
  • custom terms associated with any post type
  • logged in status
  • logged in user role
  • logged in user ID (to track cross device behaviour in Google Analytics)
  • logged in user email address (both unhashed and SHA256 hased values to be used with tracking)
  • logger in user creation date
  • site search data
  • site name and id (for WordPress multisite instances)
  • IP address of the visitor (please use the explicit consent of the visitor to utilize this)

Browser / OS / Device data

  • browser data (name, version, engine)
  • OS data (name, version)
  • device data (type, manufacturer, model)

Data is provided using the WhichBrowser library: http://whichbrowser.net/

Weather data

(beta)

Push data about users’ current weather conditions into the dataLayer. This can be used to generate weather-related
audience/remarketing lists on ad platforms and allows for user segmentation in your web analytics solutions:

  • weather category (clouds, rain, snow, etc.)
  • weather description: more detailed data
  • temperature in Celsius or Fahrenheit
  • air pressure
  • wind speed and degrees

Weather data is queried from Open Weather Map. Depending on your websites traffic, additional fees may apply:
http://openweathermap.org/price

An (free) API key from OpenWeatherMap is required for this feature to work.

ipstack.com is used to determine the site visitor’s location. A (free) API key from IPStack.com is required for this feature to work:
https://ipstack.com/product

Media player events

(experimental)

Track users’ interaction with any embedded media:

  • YouTube
  • Vimeo
  • Soundcloud

DataLayer events can be chosen to fire upon media player load, media is being played, paused/stopped and optionally when
the user reaches 10, 20, 30, …, 90, 100% of the media duration.

Tracking is supported for embedded media using the built-in oEmbed feature of WordPress as well as most other media plugins
and copy/pasted codes. Players injected into the website after page load are not currently supported.

Scroll tracking

Fire tags based on how the visitor scrolls from the top to the bottom of a page.
An example would be to separate “readers” (who spend a specified amount of time on a page) from “scrollers”
(who only scroll through within seconds). You can use these events to fire Analytics tags and/or remarketing/conversion tags
(for micro conversions).

Scroll tracking is based on the solution originally created by

  • Nick Mihailovski
  • Thomas Baekdal
  • Avinash Kaushik
  • Joost de Valk
  • Eivind Savio
  • Justin Cutroni

Original script:
http://cutroni.com/blog/2012/02/21/advanced-content-tracking-with-google-analytics-part-1/

Blacklist & Whitelist Tag Manager tags, triggers and variables

To increase website security, you have the option to white- and blacklist tags/triggers/variables.
You can prevent specific tags from firing or the use of certain variable types regardless of your GTM setup.

If the Google account associated with your GTM account is being hacked, an attacker could easily
execute malware on your website without accessing its code on your hosting server. By blacklisting custom HTML tags
and/or custom JavaScript variables you can secure the Tag Manager container.

Integration

Google Tag Manager for WordPress integrates with several popular plugins. More integration to come!

  • Contact Form 7: fire an event when a Contact Form 7 form was submitted with any result (mail sent, mail failed, spam detected, invalid input)
  • WooCommerce:
    • Implementation of GA4 E-commerce
    • Does not support promotions since WooCommerce does not have such a feature (yet)
    • Does not support refunds
    • Compatibility with High Performance Order Storage (HPOS)
  • AMP: load your AMP container on the AMP version of your pages
  • Cookiebot: use automatic cookie blocking mode if needed
  • Google Consent Mode v2: fire the “default” command with specific consent flags to integrat with non-certified Consent Management Platforms (CMPs) and plugins.

Server side containers

If you are using a server side container
you can enter your custom domain name and custom path to load gtm.js from your there.

Exclude specific user roles from being tracked

You can set which user roles needs to be excluded from tracking when a user with that role visits the frontend. This will completely disable the container code for that user.

DomainExposuresHeadersLast Checked
k*e*t*e*s*l*i*g.com (WP 7.1) F Sep 4, 2026
k*e*t*e*p*o*e*s*n*.com (WP 7.1) F Sep 4, 2026
f*m*l*-*r*t*c*i*n*o*s.com (WP 6.9.7) F Sep 4, 2026
k*e*t*g*t*e*.com (WP 7.0.4) F Sep 4, 2026
k*e*t*e*a*e*.com (WP 7.1) F Sep 4, 2026
h*z*r*.c*.za C Sep 4, 2026
h*z*r*.mx C Sep 4, 2026
h*z*r*.cn C Sep 4, 2026
u*e*v*n*a*e*a.nl C Sep 4, 2026
a*e*i*a*t*r*.com F Sep 4, 2026
x*o*u*i*v*s*a*s.com (WP 7.1) F Sep 4, 2026
x*o*u*i*v*s*a*.com (WP 7.1) F Sep 4, 2026
j*s*i*e*e*a*g*o*p.com F Sep 4, 2026
p*p*.c*m.pl F Sep 4, 2026
o*i*e*l*g*.c*.uk F Sep 3, 2026
j*s*i*e*o*s*x*b*s*.com D Sep 3, 2026
s*a*t*h*n*s*l*s*.com A Sep 3, 2026
s*a*t*h*n*s*l*s.com A Sep 3, 2026
s*a*t*h*n*p*u*.com A Sep 3, 2026
s*a*t*h*n*s*p*u*.com A Sep 3, 2026
r*a*m*i*e.com F Sep 3, 2026
k*e*r*c*s*.com C Sep 3, 2026
r*a*m*f*i*a*a*a*i*.com (WP 7.0.4) F Sep 3, 2026
a*e*i*a*h*b*a*t*f*l*e*t*v*l.com (WP 7.1) F Sep 3, 2026
z*e*a*v*r*i*i*g.com (WP 7.1) F Sep 3, 2026
d*p*g*e*i*t*r*e*r*.nl (WP 7.0.4) F Sep 3, 2026
r*a*m*d*l*i*e.com (WP 4.9.26) F Sep 3, 2026
o*a*h*a*t*w*r*f*r*e.org (WP 7.0.4) F Sep 3, 2026
i*s*y.pl (WP 5.3.17) F Sep 3, 2026
c*p*u*b*s*w*n*s.com (WP 7.1) D Sep 3, 2026
f*m*l*-*b*-*u*p*r*s.com (WP 7.1) F Sep 3, 2026
p*l*o*.fr (WP 7.0.4) F Sep 3, 2026
a*e*i*a*v*i*e.com F Sep 3, 2026
d*s*i*c*i*e*e*i*n*e*o*e*i*g*n*.com C Sep 3, 2026
d*g*t*l*n*i*h*s.cz (WP 6.9.7) F Sep 3, 2026
c*p*i*n*r*o*.com F Sep 3, 2026
s*u*d*r*v*d*o.com (WP 6.9.7) F Sep 3, 2026
h*a*t*4*o*.com F Sep 3, 2026
j*s*i*e*e*s.com D Sep 3, 2026
j*s*i*e*e*o*r*t*.com D Sep 3, 2026
t*a*t*m*n*-*u*i*i*e*d*u*u*.com (WP 7.1) F Sep 3, 2026
a*a*a*o*e*e*l*h.com F Sep 3, 2026
m*s*u*a*u*a*.com (WP 6.7.7) F Sep 3, 2026
a*e*i*a*s*l*r*o*p*n*.com A Sep 3, 2026
s*u*d*r*d*c*i*n*i*h*i*g.com D Sep 3, 2026
s*u*d*r*d*c*i*n*n*l*g*t*n*.com D Sep 3, 2026
b*b*u*s*h*u*e.com (WP 7.0.4) F Sep 3, 2026
d*o*x.fr F Sep 3, 2026
j*s*i*e*d*m*.com D Sep 3, 2026
r*d*a*t*e*r*g*r*t*o*.c*m.au F Sep 3, 2026
m*s*e*v*s*s*x*l*s*v*s.com F Sep 3, 2026
m*s*e*v*s*s.com F Sep 3, 2026
u*i*e*u*a.com (WP 7.1) D Sep 3, 2026
f*m*l*e*f*y*r*.com A Sep 3, 2026
c*a*p*o*i*g*o*i*l*a*e.o*g.uk (WP 6.8.8) D Sep 3, 2026
h*r*v*o*m*d*m*l*k.nl F Sep 3, 2026
h*a*t*2*-*0.com (WP 7.1) D Sep 3, 2026
t*i*g*r*a*p*t*y*.com F Sep 3, 2026
e*t*e*-*c*d*m*.com F Sep 3, 2026
r*a*l*v*c*a*h*n*.com D Sep 3, 2026
r*a*l*v*.com D Sep 3, 2026
b*m*o*s*r*i*.c*m.br C Sep 3, 2026
m*s*a*e*.com F Sep 3, 2026
m*s*a*a*d*p*d*l.com (WP 7.0.4) F Sep 3, 2026
x*t*u*.com F Sep 3, 2026
p*r*a*d*i*v*r*o.c*m.br D Sep 3, 2026
o*u*a*t*u*i*s*i*j*k*.com (WP 6.1.4) F Sep 3, 2026
o*u*a*t*h*a*i*-*i*o*b*s*i.com (WP 6.1.4) F Sep 3, 2026
t*i*o*c*-*n*.com A Sep 3, 2026
a*e*i*a*g*r*a*r*c*a*.com (WP 7.1) C Sep 3, 2026
a*e*i*a*f*t*r*t*u*.com F Sep 3, 2026
k*v*f*l*.hu F Sep 3, 2026
a*e*i*a*d*p*o*a*s.com F Sep 3, 2026
c*i*k*r*s*-*a*k*t*n*.be (WP 7.1) D Sep 3, 2026
o*u*r*i*.com (WP 7.1) C Sep 3, 2026
k*e*i*g*h*v*w*.com D Sep 3, 2026
s*u*d*a*k*n*p*h.com F Sep 3, 2026
o*u*e*.com (WP 6.8.8) F Sep 3, 2026
o*u*a*d*k*-*h*n*u*u.com (WP 6.1.4) F Sep 3, 2026
o*u*a*c*t*r*n*.com (WP 7.0.3) F Sep 3, 2026
t*a*n*t*p*h*p*i*g.com (WP 7.1) F Sep 3, 2026
t*a*n*t*t*o*g*m*.com C Sep 3, 2026
t*a*n*t*t*o*2.com F Sep 3, 2026
e*t*a*h*r*e*.com (WP 7.1) F Sep 3, 2026
z*e*d*c*.com (WP 6.9.7) F Sep 3, 2026
c*p*e*s*s*i*t*d*i*i*g.com F Sep 3, 2026
r*a*l*f*p*o*e*t*o*.com F Sep 3, 2026
b*b*e*r*o*l*i*e*.com F Sep 3, 2026
m*s*n*o*t*e*e*e*.com (WP 6.9.7) F Sep 3, 2026
m*s*n*m*l*a*d*u*b*r.com (WP 7.0.4) F Sep 3, 2026
k*e*h*m*.com F Sep 3, 2026
k*e*h*m*e*i*g*o*s*r*c*i*n.com F Sep 3, 2026
j*s*g*j*e*s.com F Sep 3, 2026
r*a*l*a*h*r*t*d*o.com (WP 7.1) F Sep 3, 2026
r*a*l*a*h*r*j*c*e*.com (WP 7.0.4) C Sep 3, 2026
e*t*t*c*e*p*e*t*i*a.com (WP 6.7.2) F Sep 3, 2026
t*a*n*a*e*n*p*r*.com (WP 7.0.4) D Sep 3, 2026
p*s*l*r*i*d*w*i*m.c*.uk D Sep 3, 2026
s*u*d*n*e*s*t*.com C Sep 3, 2026
f*m*l*a*u*c*r*i.com (WP 5.8.15) F Sep 3, 2026

Top 50 Plugins

Plugin Count
elementor 1,727,226
contact-form-7 1,719,352
elementor-pro 1,028,902
woocommerce 797,771
revslider 591,142
jetpack 429,986
js_composer 407,797
wp-rocket 325,592
essential-addons-for-elementor-lite 257,055
gravityforms 252,205
google-site-kit 252,083
complianz-gdpr 251,842
cookie-law-info 223,076
instagram-feed 219,598
sitepress-multilingual-cms 206,336
header-footer-elementor 200,102
google-analytics-for-wordpress 198,850
bluehost-wordpress-plugin 189,410
elementskit-lite 173,844
gutenberg 157,637
litespeed-cache 145,316
cookie-notice 144,385
gutenberg-core 138,323
gtranslate 120,731
the-events-calendar 120,207
wpforms-lite 118,259
astra-sites 108,546
popup-maker 106,733
woocommerce-payments 105,151
tablepress 101,208
honeypot 96,402
coblocks 92,364
astra-addon 91,298
duracelltomi-google-tag-manager 88,273
wp-smushit 88,197
layerslider 86,406
all-in-one-seo-pack 86,193
bb-plugin 84,772
ml-slider 82,144
akismet 81,849
premium-addons-for-elementor 80,546
cleantalk-spam-protect 80,198
mailchimp-for-wp 78,714
megamenu 78,644
ewww-image-optimizer 76,811
wp-pagenavi 76,500
jet-engine 76,456
fusion-builder 75,370
smart-slider-3 74,262
gravityformsrecaptcha 72,802

Top 50 Themes

Theme Count
hello-elementor 608,717
Divi 482,775
astra 401,768
flatsome 145,406
Avada 118,318
generatepress 112,137
pub 95,660
oceanwp 77,960
kadence 77,621
enfold 66,901
salient 63,294
twentyseventeen 52,931
bb-theme 51,759
twentytwentyfour 51,690
betheme 51,447
cocoon-master 49,902
blocksy 49,691
h4 48,094
twentytwentyfive 45,723
woodmart 44,946
dt-the7 44,417
neve 37,022
Avada-Child-Theme 36,426
gox 35,880
lightning 30,789
bridge 30,311
twentytwentyone 29,362
swell 29,194
twentytwenty 27,983
bricks 26,807
Impreza 25,490
Newspaper 23,611
twentytwentythree 21,308
epik-redesign 18,836
twentytwentytwo 18,148
uncode 18,002
twentysixteen 17,270
pro 17,152
sydney 15,733
storefront 15,679
Total 14,079
factory-templates-4 13,887
hello-theme-child-master 13,646
themify-ultra 12,704
hestia 12,274
yootheme 12,251
yith-wonder 11,698
jupiter 11,584
porto 11,522
twentyfifteen 11,510