Lean GA4 Tracker Security & Risk Analysis

wordpress.org/plugins/lean-ga4-tracker

Lightweight Google Analytics 4 (GA4) plugin for WordPress with WooCommerce tracking, Consent Mode, and Google Tag Manager support.

0 active installs v1.2.0 PHP 8.2+ WP 6.2+ Updated Jan 3, 2026
ecommerce-trackingga4google-tag-managertags-google-analyticswoocommerce-analytics
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Lean GA4 Tracker Safe to Use in 2026?

Generally Safe

Score 100/100

Lean GA4 Tracker has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The lean-ga4-tracker plugin v1.2.0 demonstrates a generally strong security posture based on the provided static analysis and vulnerability history. The absence of any recorded CVEs, unpatched vulnerabilities, or common vulnerability types in its history is a significant positive indicator. Furthermore, the static analysis reveals no dangerous functions, raw SQL queries, or taint flows with unsanitized paths, suggesting careful development practices in these critical areas. The plugin also correctly utilizes prepared statements for its SQL queries and includes some nonce and capability checks, further contributing to its security.

Key Concerns

  • Output escaping is only 48% proper
  • External HTTP requests present
Vulnerabilities
None known

Lean GA4 Tracker Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Lean GA4 Tracker Release Timeline

v1.2.0Current
v1.1.6
v1.1.5
v1.1.4
v1.1.3
v1.1.2
v1.1.1
v1.1.0
v1.0.9
v1.0.7
v1.0.6
v1.0.5
v1.0.4
v1.0.3
Code Analysis
Analyzed Mar 17, 2026

Lean GA4 Tracker Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
94
86 escaped
Nonce Checks
1
Capability Checks
5
File Operations
0
External Requests
3
Bundled Libraries
0

Output Escaping

48% escaped180 total outputs
Attack Surface

Lean GA4 Tracker Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 35
actionadmin_menusrc\Admin\AdminMenu.php:10
actionwp_dashboard_setupsrc\Dashboard\DashboardWidget.php:10
actionadmin_enqueue_scriptssrc\Dashboard\DashboardWidget.php:11
actionwp_footersrc\Events\Ga4Events.php:14
actionwp_footersrc\Forms\FormsTrackingSettings.php:80
actionwpcf7submitsrc\Forms\FormsTrackingSettings.php:95
actionwpforms_process_completesrc\Forms\FormsTrackingSettings.php:111
actionfrm_after_create_entrysrc\Forms\FormsTrackingSettings.php:127
actiongform_after_submissionsrc\Forms\FormsTrackingSettings.php:148
actionninja_forms_after_submissionsrc\Forms\FormsTrackingSettings.php:164
actionfluentform_submission_insertedsrc\Forms\FormsTrackingSettings.php:183
actionplugins_loadedsrc\Plugin.php:15
actionnetwork_admin_menusrc\Settings\NetworkSettings.php:9
actionnetwork_admin_edit_lean_ga4_network_settingssrc\Settings\NetworkSettings.php:10
actionnetwork_admin_noticessrc\Settings\NetworkSettings.php:11
actionadmin_initsrc\Settings\SiteSettings.php:11
actionadmin_initsrc\Settings\SiteSettings.php:12
actionadmin_noticessrc\Settings\SiteSettings.php:18
actionadmin_enqueue_scriptssrc\Settings\SiteSettings.php:19
actionwp_headsrc\Tracker\ConsentManager.php:7
actionwp_enqueue_scriptssrc\Tracker\ScriptManager.php:8
filterscript_loader_tagsrc\Tracker\ScriptManager.php:9
actionwp_headsrc\Tracker\ScriptManager.php:166
actionwp_headsrc\Tracker\ScriptManager.php:173
actionwp_body_opensrc\Tracker\ScriptManager.php:183
actionwoocommerce_before_single_productsrc\WooCommerce\WooCommerceTracking.php:20
actionwoocommerce_before_shop_loopsrc\WooCommerce\WooCommerceTracking.php:23
actionwp_footersrc\WooCommerce\WooCommerceTracking.php:26
actionwoocommerce_add_to_cartsrc\WooCommerce\WooCommerceTracking.php:29
actionwoocommerce_before_cartsrc\WooCommerce\WooCommerceTracking.php:32
actionwoocommerce_remove_cart_itemsrc\WooCommerce\WooCommerceTracking.php:35
actionwp_footersrc\WooCommerce\WooCommerceTracking.php:36
actionwoocommerce_before_checkout_formsrc\WooCommerce\WooCommerceTracking.php:39
actionwp_footersrc\WooCommerce\WooCommerceTracking.php:42
actionwoocommerce_thankyousrc\WooCommerce\WooCommerceTracking.php:45
Maintenance & Trust

Lean GA4 Tracker Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 3, 2026
PHP min version8.2
Downloads887

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Lean GA4 Tracker Developer Profile

Maidul

12 plugins · 1K total installs

77
trust score
Avg Security Score
97/100
Avg Patch Time
126 days
View full developer profile
Detection Fingerprints

How We Detect Lean GA4 Tracker

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/lean-ga4-tracker/assets/css/admin-dashboard.css
Version Parameters
lean-ga4-tracker/assets/css/admin-dashboard.css?ver=

HTML / DOM Fingerprints

CSS Classes
lean-ga4-dashboard-metricsmetric-card
JS Globals
Chart
FAQ

Frequently Asked Questions about Lean GA4 Tracker