Complianz GDPR/CCPA Cookie Consent Banner

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 46% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

Most reviewers call Complianz simple and reliable, but recurring complaints about the free tier's limits and buggy updates keep surfacing alongside the praise.

1. ★★★★★ Alessandro D'Orlando

   1mo ago

   Simply to use , but I have a bug and I can’t fix it This topic was modified 22 hours, 38 minutes ago by Alessandro D'Orlando.

   Read on wp.org ↗
2. ★★★★★ richardlampitt

   2mo ago

   The complianz cookie plugin used to be perfectly adequate. However the latest versions are no longer enough to even satisfy minimum legal requirements; which makes the free version of this plugin absolutely useless, and nothing more than a disingenuous ‘free trail’ instead of a serious solution.

   Read on wp.org ↗
3. ★★★★★ jtknauf

   2mo ago

   really a cool tool – only the installation was a bit tricky

   Read on wp.org ↗
4. ★★★★★ andrebernier7

   2mo ago

   I’m not an expert with WP and the integration of Complianz was smooth, easy and simple. I highly recommend it so far!

   Read on wp.org ↗
5. ★★★★★ rifday

   2mo ago

   The best plugin for gdpr, simple, lightweight and does its job

   Read on wp.org ↗
6. ★★★★★ mmk175

   2mo ago

   Great plugin, it does the job. I needed this for compliance and google tracking so it’s very useful.

   Read on wp.org ↗
7. ★★★★★ evolve-new

   2mo ago

   Sono davvero molto soddisfatto di questo plugin. È semplice da configurare, estremamente affidabile e fa esattamente ciò che promette. Da quando lo uso, il mio sito è completamente a norma senza stress e complicazioni. Aggiornamenti regolari e un supporto reattivo. Lo consiglio vivamente a chiunque abbia bisogno di un plugin Compliance serio e funzionale. 5 stelle meritate!

   Read on wp.org ↗
8. ★★★★★ inhandwriter

   2mo ago

   it’s a nice plugin and honestly it is the best that I used so far and also used it in my previous blogs like inhandwriter, News Waah and Taazi News, and now using it on Tumido News.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 7.5.0 June 17th, 2026 Feature: New Website Scan column in the post overview showing the scan status of each post. Enhancement: Notices when webshop pages, custom post types or a high post volume require the advanced Website Sc 7.5.0
2. — Version 7.4.7 June 1st, 2026 Security: Fixed DOM-based Cross-Site Scripting (XSS) vulnerability. Security: Cookie scanner and Cookiedatabase sync now require WSC authentication. Unauthenticated installs see a locked state with onboard 7.4.7
3. — Version 7.4.6 April 13th, 2026 Fix: Prevent PHP warnings when cookiedatabase.org returns a malformed or unexpected response during sync. Security: Fixed unauthorized access to post content via REST API endpoint. Enhancement: Updated G 7.4.6
4. — Version 7.4.5 March 16th, 2026 Feature: Added WCAG color contrast calculator to color picker. Feature: New plugin integration: Pinterest for WooCommerce. Add: Add Tennessee (TIPA), Minnesota (MCDPA), Maryland (MODPA), Indiana (ICDPA), 7.4.5
5. — Version 7.4.4.2 December 16th, 2025 New: Complianz logo. 7.4.4.2
6. — Version 7.4.4.1 December 3rd, 2025 Improvement: Tested up to WordPress 6.9. Fix: Updated integration with the WP Google Maps Plugin. 7.4.4.1

23 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.4 Complianz – GDPR/CCPA Cookie Consent <= 7.5.1 - Authenticated (Author+) Server-Side Request Forgery ↗
   2026-07-22 CVE-2026-65496 Server-Side Request Forgery (SSRF) Affects <= 7.5.1 Patched in 7.5.2
2. Medium · 6.6 Complianz – GDPR/CCPA Cookie Consent <= 7.5.1 - Authenticated (Administrator+) PHP Object Injection ↗
   2026-07-22 CVE-2026-65497 Deserialization of Untrusted Data Affects <= 7.5.1 Patched in 7.5.2
3. Medium · 5.3 Complianz – GDPR/CCPA Cookie Consent <= 7.5.1 - Unauthenticated Information Exposure ↗
   2026-07-22 CVE-2026-65498 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 7.5.1 Patched in 7.5.2
4. Medium · 5.3 Complianz – GDPR/CCPA Cookie Consent <= 7.4.5 - Missing Authorization to Unauthenticated Private Post Content Disclosure via Consent Area REST Endpoint ↗
   2026-04-28 CVE-2026-4019 Missing Authorization Affects <= 7.4.5 Patched in 7.4.6
5. Medium · 4.9 Complianz – GDPR/CCPA Cookie Consent <= 7.4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Filter ↗
   2026-03-25 CVE-2026-2389 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 7.4.4.2 Patched in 7.4.5
6. Medium · 6.4 Complianz | GDPR/CCPA Cookie Consent <= 7.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2026-02-17 CVE-2025-11185 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 7.4.3 Patched in 7.4.4
7. Medium · 4.3 Complianz – GDPR/CCPA Cookie Consent <= 6.5.6 - Cross-Site Request Forgery to Data Request Deletion ↗
   2024-03-01 CVE-2024-1592 Cross-Site Request Forgery (CSRF) Affects <= 6.5.6 Patched in 7.0.0
8. Medium · 4.4 Complianz | GDPR/CCPA Cookie Consent <= 6.5.5 - Authenticated(Administrator+) Stored Cross-site Scripting via settings ↗
   2024-01-03 CVE-2023-6498 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 6.5.5 Patched in 6.5.6
9. Medium · 6.1 Complianz <= 6.4.4 (Premium <= 6.4.6.1) - Cross-Site Request Forgery to Stored Cross-Site Scripting ↗
   2023-06-21 CVE-2023-33333 Cross-Site Request Forgery (CSRF) Affects <= 6.4.4 Patched in 6.4.5
10. Medium · 4.3 Complianz <= 6.4.5 (Premium <= 6.4.7) - Cross-Site Request Forgery ↗
    2023-06-20 CVE-2023-34030 Cross-Site Request Forgery (CSRF) Affects <= 6.4.5 Patched in 6.4.6
11. Medium · 4.3 Complianz | GDPR/CCPA Cookie Consent <= 6.4.5 - Cross-Site Request Forgery ↗
    2023-05-30 CVE-2023-34030 Cross-Site Request Forgery (CSRF) Affects < 6.4.6 Patched in 6.4.6
12. Medium · 4.3 Complianz - GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via maybe_install_suggested_plugins ↗
    2023-05-12 CVE-2023-33333 Cross-Site Request Forgery (CSRF) Affects <= 6.4.4 Patched in 6.4.5
13. Medium · 6.1 Complianz - GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via ajax_script_save ↗
    2023-05-12 CVE-2023-33333 Cross-Site Request Forgery (CSRF) Affects <= 6.4.4 Patched in 6.4.5
14. Medium · 4.3 Complianz - GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via ajax_create_pages ↗
    2023-05-12 CVE-2023-33333 Cross-Site Request Forgery (CSRF) Affects <= 6.4.4 Patched in 6.4.5
15. Medium · 4.3 Complianz - GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via ajax_edit_item ↗
    2023-05-12 CVE-2023-33333 Cross-Site Request Forgery (CSRF) Affects <= 6.4.4 Patched in 6.4.5
16. Medium · 6.1 Complianz - GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via ajax_script_add ↗
    2023-05-12 CVE-2023-33333 Cross-Site Request Forgery (CSRF) Affects <= 6.4.4 Patched in 6.4.5
17. Medium · 5.4 Complianz - GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via ajax_delete_snapshot ↗
    2023-05-12 CVE-2023-33333 Cross-Site Request Forgery (CSRF) Affects <= 6.4.4 Patched in 6.4.5
18. Medium · 4.3 Complianz - GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via run_sync ↗
    2023-05-12 CVE-2023-33333 Cross-Site Request Forgery (CSRF) Affects <= 6.4.4 Patched in 6.4.5
19. Medium · 4.3 Complianz - GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via cmplz_duplicate_cookiebanner ↗
    2023-05-12 Cross-Site Request Forgery (CSRF) Affects <= 6.4.4 Patched in 6.4.5
20. Medium · 4.3 Complianz - GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via cmplz_delete_cookiebanner ↗
    2023-05-12 Cross-Site Request Forgery (CSRF) Affects <= 6.4.4 Patched in 6.4.5
21. Medium · 6.4 Complianz - GDPR/CCPA Cookie Consent <= 6.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2023-03-06 CVE-2023-1069 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 6.4.1 Patched in 6.4.2
22. High · 8.8 Complianz Free <= 6.3.3 & Premium <= 6.3.5 - SQL Injection via Translations ↗
    2022-10-17 CVE-2022-3494 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 6.3.3 Patched in 6.3.4
23. Medium · 6.1 Complianz - GDPR/CCPA Cookie Consent <= 5.5.2 - Reflected Cross-Site Scripting via s parameter ↗
    2022-01-17 CVE-2022-0193 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 6.0.0 Patched in 6.0.0

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 59 languages, 16 at 90% or more

Plus 35 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2024-05-21 900K+ → 1M+ up after 94 days in tier
2. 2024-02-17 800K+ → 900K+ up after 116 days in tier
3. 2023-10-24 700K+ → 800K+ up after 130 days in tier
4. 2023-06-16 600K+ → 700K+ up after 112 days in tier
5. 2023-02-24 500K+ → 600K+ up after 97 days in tier
6. 2022-11-19 400K+ → 500K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• CookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice) 1M+ installs · 4.8★ · 5 shared tags A
• WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) 200K+ installs · 4.7★ · 5 shared tags A
• Lightweight Cookie Notice – Cookie Banner for Cookie Consent 5K+ installs · 4.2★ · 5 shared tags A
• GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law 300K+ installs · 4.5★ · 4 shared tags A
• Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode 100K+ installs · 4.4★ · 4 shared tags A
• Termly – GDPR/CCPA Cookie Consent Banner 80K+ installs · 3.7★ · 4 shared tags B

Embed this report card

Drop a live Pulse card for Complianz GDPR/CCPA Cookie Consent Banner into a readme, a review or a deck. It updates itself.

Complianz GDPR/CCPA Cookie Consent Banner: 1M+ active installs, 4.7★ (1,655 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/complianz-gdpr