WP Manifestindependent plugin directory
manifest / analytics / wp-gtm-datalayer

Google Tag Manager Data Layer WP Registry grade B. Medium-severity findings · 1 findingWP RegistryMedium-severity findings · 1 findingOpen the reportB

Wordpress plugin for Google Tag Manager DataLayer with a lot of data

★ 7stars
1.0.0-beta2latest · 8 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/powerticmkt/wp-gtm-datalayer/archive/refs/heads/master.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

Google Tag Manager Data Layer by Powertic

Google Tag Manager DataLayer plugin put all wordpress info from platform, woocommerce, user-agent, analytics utm and more on your GTM DataLayer.

How to Install

Just download the latest version from Github here: https://github.com/powerticmkt/wp-gtm-datalayer/archive/master.zip

Important: This plugin is not listed on Wordpress directory until release of first stable version.

Usage

After install and activate the plugin your Google Tag Manager Data Layer it's full of info on head tag.

Go to Google Data Layer Panel and Enable Preview Mode to see all variables available on your Data Layer:

Wordpress Variables

gtmPagePostType: Return the post type

gtmPageTemplate: Return the post template

gtmPageCategory: Return the main posy category

gtmPageTags: Return the all post tags with commas

gtmPagePostAuthorID: Return the ID of author of post/page

gtmPagePostAuthor: Return the Author name of post/page

gtmPagePostDate: Return the post publish date

gtmPagePostDateYear: Return the year of post publish date

gtmPagePostDateMonth: Return the month of post publish date

gtmPagePostDateDay: Return the day of post publish date

gtmUserEmail: Return the current user e-mail

gtmUserType: Return the current user role

gtmUserId: Return the current user ID

gtmLogin: Return the status "logged" or "anonymous"

User Agent / Browser Variables

gtmBrowserName Return the Browser name

gtmBrowserVersion Return the browser version

gtmBrowserEngineName

gtmBrowserEngineVersion

gtmOsName

gtmOsVersion

gtmDeviceType

gtmDeviceManufacturer

gtmDeviceModel

gtmReferer

GeoLocation Variables

gtmGeoCountry

gtmGeoCountryCode

gtmGeoRegion

gtmGeoRegionName

gtmGeoCity

Google Analytics UTM Variables

gtmUtmSource

gtmUtmMedium

gtmUtmCampaign

gtmUtmTerm

gtmUtmContent

WooCommerce Variables

gtmWooOrdersCount

Releases

7 releases.

Tag
Published
1.0.0-beta2 latest
Nov 21, 2017 8 years ago
Nov 21, 2017 8 years ago
Nov 21, 2017 8 years ago
Feb 13, 2017 9 years ago
Feb 13, 2017 9 years ago
Feb 12, 2017 9 years ago
Feb 12, 2017 9 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

Google Tag Manager Data Layer 1.0.0-beta2 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
1.0.0-beta2
Findings
1
Worst severity
medium
Content hash
ad7894d5357e636f39427786…

Findings

  • medium Logged-in user email exposed in frontend dataLayer

    information_disclosure

    gtmWPUserEmail is set from $current_user->user_email and printed into public page HTML/JS for any logged-in user, enabling third-party GTM tags or XSS to harvest emails.

    plugin.php:68-68,179-186

    Recommendation

    Hash or omit email from client-side dataLayer; send PII only server-side if required.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.