GTM Kit – Google Tag Manager & GA4 integration
Explore GTM Kit – Google Tag Manager & GA4 integration vulnerabilities across all versions. Currently tracking 1 known vulnerabilities, including severity, impact, and patch status.
Vulnerability Records

GTM Kit – Google Tag Manager & GA4 integration
Author
TLA Media
GTM Kit puts the Google Tag Manager container code on your website so that you don’t need to touch any code. It also pushes data from WooCommerce, Easy Digital Downloads (EDD) and Contact Form 7 to the data layer for use with for Google Analytics 4, Facebook and other GTM tags. The goal of GTM Kit is to provide a flexible tool for generating the data layer for Google Tag Manager. It is easy to use and doesn’t require any coding, but it allows developers to customize the plugin as needed. The settings are organised around what you are trying to do (Setup, Events & data layer, Commerce, Consent & privacy, and Tools), so related options live together and the setting you need is quick to find. eCommerce events tracked with Google Analytics 4 The following GA4 events are automatically included in the dataLayer: WooCommerce view_item_list select_item view_item add_to_wishlist [Premium] add_to_cart view_cart remove_from_cart begin_checkout add_shipping_info add_payment_info purchase refund [Premium] order_paid [Premium] order_processing [Premium] order_completed [Premium] order_refunded [Premium] subscription_started [Premium] Unlock all features with GTM Kit Premium. Easy Digital Downloads view_item add_to_cart begin_checkout purchase Flexible container implementation Depending on how you use Google Tag Manager you can delay the loading of the container script until the browser is idle. This may be relevant to you be if are focusing on pagespeed. You may enter a custom domain name if you are using a custom server side GTM (sGTM) container for tracking. It’s also possible to specify a custom loader. GTM Kit has full support for Stape server GTM hosting. You can also exclude specific pages from GTM entirely. Add URL patterns on the Container settings page and GTM Kit holds back the container, the noscript fallback, and its data layer scripts on matching pages. Useful for third-party checkout iframes, partner-hosted subpages, and in-app webview routes that run their own tracking. Glob patterns are supported by default, with optional regex for advanced matching. Post data You may specify which post data elements you wish to include in the dataLayer for use in Google Tag Manager. – Post type: include the type of the current post or archive page. – Page type: include a defined page type. I.e. post, page, product, category, cart, checkout etc. – Categories: include the categories of the current post or archive page. – Tags: include the tags of the current post or archive page. – Post title: include the post title of the current post. – Post ID: include the Post ID of the current post. – Post date: include the post date. – Post author name: include the post author name. – Post author ID: include the post author ID.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C