WP-Safety

UTM Event Tracker and Analytics, UTM Grabber Security & Risk Analysis

wordpress.org/plugins/utm-event-tracker-and-analytics

Easily capture UTM parameters, track button and link clicks, and analyze campaigns to improve your marketing ROI in WordPress.

1K active installs v1.2.0 PHP 7.4.3+ WP 6.2+ Updated Jan 26, 2026
utmutm-analyticsutm-grabberutm-parametersutm-tracking
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is UTM Event Tracker and Analytics, UTM Grabber Safe to Use in 2026?

Generally Safe

Score 100/100

UTM Event Tracker and Analytics, UTM Grabber has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The "utm-event-tracker-and-analytics" v1.2.0 plugin exhibits a generally strong security posture based on the provided static analysis. The absence of any known CVEs and the fact that all entry points (AJAX handlers, REST API routes, shortcodes, and cron events) are either secured or do not exist contribute to a low risk profile. The code also demonstrates good practices with a high percentage of SQL queries using prepared statements and a substantial amount of output being properly escaped. The lack of file operations and the presence of nonce and capability checks further bolster its security.

Key Concerns

  • Limited capability checks found (2)
  • Moderate number of SQL queries (94)
  • Some output not properly escaped (6%)
  • External HTTP requests present (3)
Vulnerabilities
None known

UTM Event Tracker and Analytics, UTM Grabber Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

UTM Event Tracker and Analytics, UTM Grabber Release Timeline

v1.2.0Current
v1.1.9
v1.1.8
v1.1.7
v1.1.6
v1.1.5
v1.1.4
v1.1.3
v1.1.2
v1.1.1
v1.1.0
v1.0.9
v1.0.8
v1.0.7
v1.0.6
v1.0.5
v1.0.4
v1.0.3
v1.0.2
v1.0.1
Code Analysis
Analyzed Mar 16, 2026

UTM Event Tracker and Analytics, UTM Grabber Code Analysis

Dangerous Functions
0
Raw SQL Queries
3
91 prepared
Unescaped Output
9
146 escaped
Nonce Checks
16
Capability Checks
2
File Operations
0
External Requests
3
Bundled Libraries
0

SQL Query Safety

97% prepared94 total queries

Output Escaping

94% escaped155 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

14 flows
get_events_list (inc\admin\class-event.php:226)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

UTM Event Tracker and Analytics, UTM Grabber Attack Surface

Entry Points14
Unprotected0

AJAX Handlers 14

authwp_ajax_utm_event_tracker/get_events_listinc\admin\class-event.php:26
authwp_ajax_utm_event_tracker/get_events_statsinc\admin\class-event.php:27
authwp_ajax_utm_event_tracker/get_event_overview_queryinc\admin\class-event.php:28
authwp_ajax_utm_event_tracker/get_event_date_overview_datainc\admin\class-event.php:29
authwp_ajax_utm_event_tracker/handle_preview_modeinc\class-admin.php:56
authwp_ajax_utm_event_tracker/dismiss_cache_noticeinc\class-admin.php:57
authwp_ajax_utm_event_tracker/clear_current_sessioninc\class-admin.php:58
authwp_ajax_utm_event_tracker/capture_custom_eventinc\class-main.php:110
noprivwp_ajax_utm_event_tracker/capture_custom_eventinc\class-main.php:111
authwp_ajax_utm_event_tracker/get_sessionsinc\class-query.php:22
authwp_ajax_utm_event_tracker/get_keywords_reportinc\class-query.php:23
authwp_ajax_utm_event_tracker/get_date_reportinc\class-query.php:24
authwp_ajax_utm_event_tracker/get_keywords_statsinc\class-query.php:25
authwp_ajax_utm_event_tracker/update_overview_settingsinc\class-query.php:26
WordPress Hooks 45
actionadmin_footerinc\admin\class-event.php:22
actionutm_event_tracker/admin_menuinc\admin\class-event.php:23
filterutm_event_tracker/dashboard_widgetsinc\admin\class-event.php:24
actionutm_event_tracker/admin_menuinc\admin\class-utm-campaign.php:22
filterutm_event_tracker/dashboard_widgetsinc\admin\class-utm-campaign.php:23
actionutm_event_tracker/admin_menuinc\admin\class-utm-content.php:22
filterutm_event_tracker/dashboard_widgetsinc\admin\class-utm-content.php:23
actionutm_event_tracker/admin_menuinc\admin\class-utm-medium.php:22
filterutm_event_tracker/dashboard_widgetsinc\admin\class-utm-medium.php:23
actionutm_event_tracker/admin_menuinc\admin\class-utm-sessions.php:22
actionutm_event_tracker/admin_menuinc\admin\class-utm-source.php:22
filterutm_event_tracker/dashboard_widgetsinc\admin\class-utm-source.php:23
actionutm_event_tracker/admin_menuinc\admin\class-utm-term.php:22
filterutm_event_tracker/dashboard_widgetsinc\admin\class-utm-term.php:23
actionadmin_menuinc\class-admin.php:52
actionadmin_footerinc\class-admin.php:53
actioninitinc\class-admin.php:54
actionadmin_enqueue_scriptsinc\class-admin.php:55
actionutm_event_tracker/admin_settingsinc\class-admin.php:60
actionutm_event_tracker/admin_settingsinc\class-admin.php:61
actionutm_event_tracker/admin_settingsinc\class-admin.php:63
actionutm_event_tracker/admin_settingsinc\class-admin.php:64
actionutm_event_tracker/admin_settingsinc\class-admin.php:65
actionutm_event_tracker/admin_settingsinc\class-admin.php:66
actionutm_event_tracker/admin_settingsinc\class-admin.php:67
actionutm_event_tracker/after_custom_eventsinc\class-admin.php:68
actionutm_event_tracker/admin_settingsinc\class-admin.php:69
filterwpo_cache_defaultsinc\class-cache.php:20
actionadmin_footerinc\class-google-analytics.php:143
actionadmin_footerinc\class-google-analytics.php:144
actionutm_event_tracker/google_analytics/events_settings_rowsinc\class-google-analytics.php:145
actionutm_event_tracker/google_analytics/event_condition_templateinc\class-google-analytics.php:146
actionadmin_noticesinc\class-main.php:60
actionwpinc\class-main.php:103
actionwp_footerinc\class-main.php:104
actionwp_enqueue_scriptsinc\class-main.php:105
actiontemplate_redirectinc\class-main.php:106
actiontemplate_redirectinc\class-main.php:107
filterplugin_action_linksinc\class-main.php:108
actionplugins_loadedinc\class-main.php:109
actioninitinc\class-migrate.php:30
actioninitinc\class-migrate.php:31
actioninitinc\class-migrate.php:32
actionutm_event_tracker/migrate_event_datainc\class-migrate.php:34
actionutm_event_tracker/update_session_locationinc\class-migrate.php:35

Scheduled Events 2

utm_event_tracker/update_session_location
utm_event_tracker/migrate_event_data
Maintenance & Trust

UTM Event Tracker and Analytics, UTM Grabber Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 26, 2026
PHP min version7.4.3
Downloads9K

Community Trust

Rating100/100
Number of ratings6
Active installs1K
Alternatives

UTM Event Tracker and Analytics, UTM Grabber Alternatives

UTM Leads Tracker – XLPlugins

UTM Leads Tracker – XLPlugins

utm-leads-tracker-lite

A
85

Discover which marketing campaigns are actually profitable and which are wasting your time & money. UTM Lead Tracker records the source of the lea …

500 No CVEs
UTM Tracker for Contact Form 7

UTM Tracker for Contact Form 7

utm-tracker-for-contact-form-7

A
100

Track UTM parameters in Contact Form 7 submissions automatically and identify which campaigns generate real leads from your marketing traffic.

200 No CVEs
HandL UTM Grabber / Tracker

HandL UTM Grabber / Tracker

handl-utm-grabber

A
95

The WordPress attribution plugin used by over 200,000+ sites to capture UTMs, gclid, and source data in your forms, CRM, and revenue workflows.

10K 3 CVEs
Easy UTM Tracking with Contact Form 7

Easy UTM Tracking with Contact Form 7

easy-utm-tracking-with-contact-form-7

A
85

Easy UTM Tracking with Contact Form 7 is a simple plugin that lets you track UTM parameters and referrer in your Contact Form 7 lead emails with just …

2K No CVEs
Easy UTM Builder

Easy UTM Builder

easy-utm-builder

A
100

Easy to build trackable URLs with UTM parameters in Bulk (complete site or specific post type) for Google Analytics!

400 No CVEs
Developer Profile

UTM Event Tracker and Analytics, UTM Grabber Developer Profile

Codiepress

8 plugins · 2K total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect UTM Event Tracker and Analytics, UTM Grabber

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/utm-event-tracker-and-analytics/assets/css/utm-event-tracker-admin.css/wp-content/plugins/utm-event-tracker-and-analytics/assets/js/utm-event-tracker-admin.js/wp-content/plugins/utm-event-tracker-and-analytics/assets/js/vue.js/wp-content/plugins/utm-event-tracker-and-analytics/assets/js/vue-router.js/wp-content/plugins/utm-event-tracker-and-analytics/assets/js/vue-moment.js/wp-content/plugins/utm-event-tracker-and-analytics/assets/js/vue-chartjs.js/wp-content/plugins/utm-event-tracker-and-analytics/assets/js/chart.js/wp-content/plugins/utm-event-tracker-and-analytics/assets/js/utm-event-tracker.js+2 more
Script Paths
utm-event-tracker-vueutm-event-tracker-admin-vueutm-event-tracker-vue-routerutm-event-tracker-vue-momentutm-event-tracker-vue-chartjsutm-event-tracker-chartjs+2 more
Version Parameters
utm-event-tracker-and-analytics/assets/css/utm-event-tracker-admin.css?ver=utm-event-tracker-and-analytics/assets/js/utm-event-tracker-admin.js?ver=utm-event-tracker-and-analytics/assets/js/vue.js?ver=utm-event-tracker-and-analytics/assets/js/vue-router.js?ver=utm-event-tracker-and-analytics/assets/js/vue-moment.js?ver=utm-event-tracker-and-analytics/assets/js/vue-chartjs.js?ver=utm-event-tracker-and-analytics/assets/js/chart.js?ver=utm-event-tracker-and-analytics/assets/js/utm-event-tracker.js?ver=utm-event-tracker-and-analytics/assets/js/utm-event-tracker-frontend.js?ver=utm-event-tracker-and-analytics/assets/js/utm-event-tracker-admin-vue.js?ver=

HTML / DOM Fingerprints

CSS Classes
utm-event-tracker-wrap
Data Attributes
data-utm-event-tracker
JS Globals
UTM_Event_Tracker
FAQ

Frequently Asked Questions about UTM Event Tracker and Analytics, UTM Grabber