WP Manifestindependent plugin directory
manifest / analytics / wp-plugin

SourceTag WP Registry grade A. No security issues foundWP RegistryNo security issues foundOpen the reportA

SourceTag WordPress plugin. Lead attribution tracking with 400-day cookie persistence.

★ 0stars
13release downloads
≈10active sites
v1.0.2latest · 7mo ago

Install

Download sourcetag.zip From the v1.0.2 release on GitHub, Apr 3, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/sourcetagio/wp-plugin/releases/download/v1.0.2/sourcetag.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

SourceTag WordPress Plugin

Tracks where your leads come from. Captures UTM parameters, click IDs, referrer data, and landing pages in your form submissions.

What it does

  • First-click and last-click attribution
  • 400-day cookie persistence via server-side cookies (gets around Safari's 7-day JS cookie limit)
  • Works with Contact Form 7, Gravity Forms, WPForms, Elementor Forms, HubSpot Forms, and any HTML form
  • You just need to add hidden fields to your forms — the plugin populates them

Install

  1. Download the latest .zip from Releases
  2. In WordPress: Plugins > Add New > Upload Plugin
  3. Upload and activate
  4. Go to Settings > SourceTag and paste your Script URL from the SourceTag dashboard

Full setup guide: sourcetag.io/docs/install-wordpress

How it works

The plugin loads the SourceTag tracking script in your <head> and re-sets the attribution cookie via PHP setcookie() on each page load. This extends cookie life from 7 days (Safari's JS limit) to 400 days.

There's also a REST endpoint (/wp-json/sourcetag/v1/set-cookie) that the script calls on a visitor's first visit to set the cookie before the PHP refresh kicks in.

Requirements

  • WordPress 5.8+
  • PHP 7.4+
  • A SourceTag account (sourcetag.io)

Releases

3 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v1.0.2 latest
Apr 3, 2026 7mo ago
sourcetag.zip
4
Apr 2, 2026 7mo ago
sourcetag.zip
1
Apr 2, 2026 7mo ago
sourcetag.zip
8

Active-site estimate ≈10 comes from the median of recent superseded releases. Method.

A grade

Security

SourceTag 1.0.2 · audited by WP Registry

No security issues found.

Audited release
1.0.2
Findings
none
Worst severity
—
Content hash
16687be98e2080c6643b61c6…

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.