duracelltomi GTM4WP – A Google Tag Manager (GTM) plugin for WordPress vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Latest duracelltomi GTM4WP – A Google Tag Manager (GTM) plugin for WordPress vulnerabilities

CVE-2026-16597 — GTM4WP <= 1.22.3 - Unauthenticated Stored Cross-Site Scripting via WooCommerce Billing Fields (CVSS 7.2)
CVE-2022-1961 — Google Tag Manager for WordPress (GTM4WP) <= 1.15.1 - Stored Cross-Site Scripting via Content Element ID (CVSS 4.8)
CVE-2022-1707 — Google Tag Manager for WordPress <= 1.15 - Reflected Cross-Site Scripting via Site Search (CVSS 6.1)