Meta Tag Manager

Meta Tag Manager has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 4 are fixed as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (25%). Other recurring categories include Deserialization Of Untrusted Data, Missing Authorization.

Every one of the 4 issues recorded for Meta Tag Manager has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (2) reported by Rafie Muhammad. Meta Tag Manager is installed on roughly 70,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.0/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all Meta Tag Manager vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2024-1770

Meta Tag Manager <= 3.0.2 - Authenticated (Subscriber+) PHP Object Injection

Read the full analysis

Vulnerability Records

4 records
Meta Tag Manager banner
Latestv3.3
4.8(84)
96/100
Last Updated
2026-05-23 (4mo ago)
Active Installs
70,000+
Downloads
1,146,302
Requires WP
3.6+
Requires PHP
0+
Tested up to
WP 7.0.4
Created
2009-04-01 (18y ago)

Meta Tags Manager is a powerful yet simple, lightweight plugin which allows you to add custom meta tags to your site. Features include: Supports meta tags including the name, property, http-equiv, charset and itemprop attributes. Choose from predefined types, such as &#8216;name=”keyword”&#8216; or create your own by typing it in. Add meta tags to specific posts, choose what Custom Post Types to support from our settings page. Add global meta tags that will display on specific CPTs, Taxonomies, your front page or your whole site. Automatically add Open Graph details to your home page. Automatically add Schema and Structured Data to your home page. Add Google Sitelinks and Sitelinks Search markup. Easily add verification codes for services like Facebook, Google Webmaster Tools, Bing Webmaster Tools, Yandex and more (or… create your own custom meta tags!). Use cases include: Adding Google and Yahoo site verification tags Adding additional open graph, twitter card or other social media meta info not supported by other SEO/Meta plugins Go Pro for many newly added features, including: Dynamic placeholders to include data about the page being displayed, such as page title, comment count, thumbnail URLs and more! Additional contexts to add global meta tags, as well as exclusion rules for finer-grained controls. Shortcode support within meta descriptions, allowing for more dynamic data insertion with plugins such as ACF Unique tag detaction of Meta Tag Manager tags with hierarchical precedence, avoid creating duplicate meta tags. Taxonomy support – create meta tags for individual taxonomy term pages such as a single tag or category. More to come! Go Pro now and get an early-bird discount of up to 50%!

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C