Tracking Code Manager

82 Quality Score

Active Installs

22/30

With 90,000 active installs and a popularity score of 74 out of 30 (boosted by rating weight), the plugin has a meaningful footprint in the tracking niche without being a household name like MonsterInsights.

Update Freshness

25/25

A maintenance score of 100 out of 25 and a last update of late May 2026 signal that the developer is shipping changes regularly and has not abandoned the project.

User Rating

12/15

An 82 out of 100 user rating from 58 reviews indicates users are generally happy, though the relatively small sample of reviews means the average could shift with more feedback.

Support Health

8/15

A support health score of 50 out of 15 is dragged down by zero open and zero resolved threads in the repository, making it hard to judge how responsive the developer is to bug reports.

WP Compatibility

15/15

Full marks on compatibility with WordPress 7.0 and PHP 5.6 minimums mean it will install cleanly on everything from older shared hosts to the newest WordPress installs.

Scores higher than 88% of indexed plugins

About

A plugin to manage ALL of your tracking code and conversion pixels. Compatible with Facebook Ads, Google Adwords, WooCommerce, Easy Digital Downloads, …

Active Installs 90k+

Rating ★★★★ 4.1/5

Last Updated 2026-08-20 3:56pm GMT

Requires WordPress 3.6.0+

Tested Up To 7.0.4

Requires PHP 5.6+

Security History

7 known vulnerabilities, all patched

1 High 6 Medium

Most recent: August 5, 2026

View details ▸

Tracking Code Manager <= 2.6.0 - Cross-Site Request Forgery Medium

August 5, 2026 Patched in ["2.7.0"] CVE-2026-28172

Tracking Code Manager <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

December 23, 2024 Patched in ["2.4.0"] CVE-2024-8721

Tracking Code Manager <= 2.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting Medium

June 3, 2024 Patched in ["2.3.0"] CVE-2024-6335

Tracking Code Manager <= 2.1.0 - Missing Authorization via change_order() Medium

April 5, 2024 Patched in ["2.2.0"] CVE-2024-31347

Tracking Code Manager <= 2.0.16 - Authenticated (Administrator+) Stored Cross-Site Scripting Medium

March 18, 2024 Patched in ["2.1.0"] CVE-2024-2579

Tracking Code Manager < 1.11.5 - Cross-Site Scripting Medium

May 10, 2017 Patched in ["1.11.5"]

Tracking Code Manager < 1.11.5 - Denial of Service High

May 10, 2017 Patched in ["1.11.5"]

What It Does

Tracking Code Manager centralizes the placement of conversion pixels, analytics snippets, and ad tracking tags from networks like Facebook Ads, Google Ads, and WooCommerce or Easy Digital Downloads in one admin screen. Instead of editing your theme's header.php or relying on a site-specific plugin per network, you add and toggle scripts from a single dashboard. It supports conditional rules so tracking fires only on specific pages, products, or order events.

Who It's For

This plugin fits online store owners and performance marketers who actively run paid campaigns across multiple ad networks and need granular control over where and when each pixel or conversion tag fires. It is especially useful for WooCommerce and Easy Digital Downloads shops that want event-based tracking without hand-coding JavaScript or maintaining a child theme for every script edit.

Who Should Skip It

If you only need a single Google Analytics snippet or one Facebook pixel, a lighter plugin or your theme's settings will do the job without the added configuration surface. Developers comfortable editing functions.php will likely find more control doing it manually.

The Bottom Line

Tracking Code Manager is a tidy, actively maintained solution for marketers juggling multiple ad platforms and e-commerce event tracking, and its 81.99 overall score reflects strong maintenance and compatibility alongside middling user feedback depth. The lack of public support threads is the main gap to watch, so test thoroughly on a staging site before relying on it for billing-critical conversion events. Recommended for ad-driven stores and agencies, less essential for sites running a single analytics tag.