Vulnerabilities / GTM4WP
GTM4WP vulnerabilities
Advisories WPSec published for GTM4WP – A Google Tag Manager (GTM) plugin for WordPress. Other sources may list more. Its attack surface: GTM4WP on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-14 | WPSEC-2026-0885 | GTM4WP <= 2.0.5 - Unauthenticated Sensitive Information Exposure via Cached Custom Order Received Page | Low 3.7 | 2.0.6 |
License: CC BY 4.0