Complete GTM plugin for WooCommerce (Consent Mode v2 and Server-Side). Ready for GA4 and FB Pixel. Product feed for Google Merchant Center.
49
Score
33
Errors
19
Warnings
+1
Change
Category Scores
Security17
Repo97
Performance100
Maintainability76
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
27
4 issue groups
Maintainability
18
11 issue groups
I18n
6
3 issue groups
Repo Compliance
1
1 issue group
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$format'.15
- Category
- Security
- Occurrences
- 15
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$format'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityNot AllowedUse of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: $spineCaseNamespace3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
The $domain parameter must be a single text string literal. Found: $spineCaseNamespace
ERRORSecuritySetting is missing a sanitization callbackSanitization missing for register_setting().2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Sanitization missing for register_setting().
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$pluginData".2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$pluginData".
ERRORMaintainabilityfile system operations fcloseFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopenFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $fieldTitle2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $fieldTitle
Show 9 moreShow less
WARNINGMaintainabilityslow db query meta key1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityslow db query meta value1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
WARNINGMaintainabilityNon-prefixed hook name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".
WARNINGSecurityRequest data is not unslashed1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
$_GET['preset'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityrename rename1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
rename() is discouraged. Use WP_Filesystem::move() to rename a file.
ERRORI18nMissing Arg Domain1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGMaintainabilitymissing composer json file1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The "/vendor" directory using composer exists, but "composer.json" file is missing.
ERRORMaintainabilityMissing direct file access protection1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGRepo Complianceplugin header nonexistent domain path1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"
External Connections
Potential connections found in static code analysis.
Outbound calls
31
External assets
0
Incoming endpoints
4
Notable Domains
tagconcierge.com5 · outbound
go.tagconcierge.com4 · outbound
woocommerce.github.io4 · outbound
docs.tagpilot.io3 · outbound
api.tagconcierge.com2 · outbound
docs.tagconcierge.com2 · outbound
Platform / Reference Domains
External Asset Domains
No external asset domains detected.
Incoming Endpoints
/wp-json/gtm-ecommerce-woo/v1/diagnosticsREST
register_rest_route
Admin AJAX endpoints2
wp_ajax_gtm_ecommerce_woo_dismiss_feedbackauthenticated
wp_ajax
wp_ajax_gtm_ecommerce_woo_post_presetauthenticated
wp_ajax
Score History
2 score snapshots
v1.13.3
49
Latest
- Findings
- 52
- Errors
- 33
- Warnings
- 19
- Check
- 2.0.0
v1.13.1
48
Score
- Findings
- 54
- Errors
- 35
- Warnings
- 19
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 49 | 52 | 33 | 19 | v1.13.3 | 2.0.0 |
| 48 | 54 | 35 | 19 | v1.13.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Output is not escaped15 findingsNonce verification recommended9 findingsNot Allowed4 findingsNon Singular String Literal Domain3 findingsSetting is missing a sanitization callback2 findingsNon-prefixed global variable2 findingsfile system operations fclose2 findingsfile system operations fopen2 findings
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreGTM4WP – A Google Tag Manager (GTM) plugin for WordPress88 scorePixelYourSite – Your smart PIXEL (TAG) & API Manager24 scoreInsert Headers And Footers55 scorePixel Cat – Conversion Pixel Manager35 scorePixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing35 scoreGTM Kit – Google Tag Manager & GA4 integration87 score
Author
Category
Issue
Output is not escaped15 findingsNonce verification recommended9 findingsNot Allowed4 findingsNon Singular String Literal Domain3 findingsSetting is missing a sanitization callback2 findingsNon-prefixed global variable2 findingsfile system operations fclose2 findingsfile system operations fopen2 findings
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreGTM4WP – A Google Tag Manager (GTM) plugin for WordPress88 scorePixelYourSite – Your smart PIXEL (TAG) & API Manager24 scoreInsert Headers And Footers55 scorePixel Cat – Conversion Pixel Manager35 scorePixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing35 scoreGTM Kit – Google Tag Manager & GA4 integration87 score
Related Plugins
WP Global Site Tag
7k+ active installs
99
Simple Google Analytics Tag Manager
1k+ active installs
99
Datalayer for WooCommerce FREE
700 active installs
97
Wp Tracking Codes
900 active installs
94
Beehive Analytics – Google Analytics Dashboard
20k+ active installs
90
Pixelavo – Server Side Tracking & Pixel + AI Ads Tools
2k+ active installs
90