PLUGIN SECURITY
Is Meta Tag Manager safe?
Easily add and manage custom meta tags to various parts of your site or on individual posts, such as Yahoo and Google verification tags.
What this plugin does
- Slug:
meta-tag-manager - Author: Marcus (aka @msykes)
- 70000+ active installs
- 96/100 rating (84 reviews on wordpress.org)
- 1144477 all-time downloads
- On WordPress.org since 2009-04-01
metameta tagsopen graphseotags
Maintenance status
- Latest known version: 3.3
- Last updated: 2026-05-23 5:55pm GMT
- Tested up to WordPress: 7.0.4
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
4 known CVEs on file for Meta Tag Manager.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-22260 | Meta Tag Manager [meta-tag-manager] < 3.2 | Missing Authorization | Medium 4.3 | < 3.2 | 3.2 | 2025-01-31 | ✓ fixed in latest |
| CVE-2024-1770 | Meta Tag Manager [meta-tag-manager] < 3.1 | Deserialization of Untrusted Data | High 8.8 | < 3.1 | 3.1 | 2024-03-27 | ✓ fixed in latest |
| CVE-2023-33999 | Meta Tag Manager [meta-tag-manager] < 2.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.1 | < 2.1 | 2.1 | 2023-07-18 | ✓ fixed in latest |
| — | Meta Tag Manager [meta-tag-manager] < 3.3 | — | Unknown | < 3.3 | 3.3 | 0000-00-00 | ✓ fixed in latest |
| CVE-2025-5983 | Meta Tag Manager < 3.3 - Contributor+ Open Redirect | — | Unknown | < 3.3 | 3.3 | — | ✓ fixed in latest |
How to fix it
Keep Meta Tag Manager updated — 3.3 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Advanced Custom Fields (ACF®) — 2000000+ active installs — 90/100 (1438) — max PHP 8.4
- Meta for WooCommerce — 400000+ active installs — 42/100 (479) — max PHP 8.4
- Meta pixel for WordPress — 400000+ active installs — 54/100 (164)
- SEO SIMPLE PACK — 100000+ active installs — 92/100 (14)
- Advanced Custom Fields: Extended — 100000+ active installs — 96/100 (132) — max PHP <8.0
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.