Complianz GDPR/CCPA Cookie Consent Banner

Most reviewers call Complianz simple and reliable, but recurring complaints about the free tier's limits and buggy updates keep surfacing alongside the praise.

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

2688 searches this plugin appeared in over the last 90 days, 20 listed. 2579 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 46% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 2.5 years ago; a band this size takes about a year or more to cross, which places it about 90% of the way through.

1. ★★★★★ Alessandro D'Orlando

   4mo ago

   Simply to use , but I have a bug and I can’t fix it This topic was modified 22 hours, 38 minutes ago by Alessandro D'Orlando.

   Read on wp.org ↗
2. ★★★★★ richardlampitt

   4mo ago

   The complianz cookie plugin used to be perfectly adequate. However the latest versions are no longer enough to even satisfy minimum legal requirements; which makes the free version of this plugin absolutely useless, and nothing more than a disingenuous ‘free trail’ instead of a serious solution.

   Read on wp.org ↗
3. ★★★★★ jtknauf

   4mo ago

   really a cool tool – only the installation was a bit tricky

   Read on wp.org ↗
4. ★★★★★ andrebernier7

   4mo ago

   I’m not an expert with WP and the integration of Complianz was smooth, easy and simple. I highly recommend it so far!

   Read on wp.org ↗
5. ★★★★★ rifday

   4mo ago

   The best plugin for gdpr, simple, lightweight and does its job

   Read on wp.org ↗
6. ★★★★★ mmk175

   4mo ago

   Great plugin, it does the job. I needed this for compliance and google tracking so it’s very useful.

   Read on wp.org ↗
7. ★★★★★ evolve-new

   4mo ago

   Sono davvero molto soddisfatto di questo plugin. È semplice da configurare, estremamente affidabile e fa esattamente ciò che promette. Da quando lo uso, il mio sito è completamente a norma senza stress e complicazioni. Aggiornamenti regolari e un supporto reattivo. Lo consiglio vivamente a chiunque abbia bisogno di un plugin Compliance serio e funzionale. 5 stelle meritate!

   Read on wp.org ↗
8. ★★★★★ inhandwriter

   4mo ago

   it’s a nice plugin and honestly it is the best that I used so far and also used it in my previous blogs like inhandwriter, News Waah and Taazi News, and now using it on Tumido News.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 7.5.0 June 17th, 2026 Feature: New Website Scan column in the post overview showing the scan status of each post. Enhancement: Notices when webshop pages, custom post types or a high post volume require the advanced Website Sc 7.5.0
2. — Version 7.4.7 June 1st, 2026 Security: Fixed DOM-based Cross-Site Scripting (XSS) vulnerability. Security: Cookie scanner and Cookiedatabase sync now require WSC authentication. Unauthenticated installs see a locked state with onboard 7.4.7
3. — Version 7.4.6 April 13th, 2026 Fix: Prevent PHP warnings when cookiedatabase.org returns a malformed or unexpected response during sync. Security: Fixed unauthorized access to post content via REST API endpoint. Enhancement: Updated G 7.4.6
4. — Version 7.4.5 March 16th, 2026 Feature: Added WCAG color contrast calculator to color picker. Feature: New plugin integration: Pinterest for WooCommerce. Add: Add Tennessee (TIPA), Minnesota (MCDPA), Maryland (MODPA), Indiana (ICDPA), 7.4.5
5. — Version 7.4.4.2 December 16th, 2025 New: Complianz logo. 7.4.4.2
6. — Version 7.4.4.1 December 3rd, 2025 Improvement: Tested up to WordPress 6.9. Fix: Updated integration with the WP Google Maps Plugin. 7.4.4.1

All 25 disclosed vulnerabilities are patched in the current version (7.5.6). Sites still on an older version should update.

1. Patched High · 7.2 Complianz GDPR/CCPA Cookie Consent Banner <= 7.5.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filter ↗
   2026-10-15 CVE-2026-97339 Improper Neutralization of Input During Web Page Generation Affects <= 7.5.5 Patched in 7.5.6
2. Patched High · 7.2 Complianz GDPR/CCPA Cookie Consent Banner <= 7.5.4 - Unauthenticated Stored Cross-Site Scripting via Elementor Cookie Blocker Regex ↗
   2026-09-17 CVE-2026-83561 Improper Neutralization of Input During Web Page Generation Affects <= 7.5.4 Patched in 7.5.5
3. Patched Medium · 6.4 Complianz – GDPR/CCPA Cookie Consent <= 7.5.1 - Authenticated (Author+) Server-Side Request Forgery ↗
   2026-07-22 CVE-2026-65496 Server-Side Request Forgery Affects <= 7.5.1 Patched in 7.5.2
4. Patched Medium · 6.6 Complianz – GDPR/CCPA Cookie Consent <= 7.5.1 - Authenticated (Administrator+) PHP Object Injection ↗
   2026-07-22 CVE-2026-65497 Deserialization of Untrusted Data Affects <= 7.5.1 Patched in 7.5.2
5. Patched Medium · 5.3 Complianz – GDPR/CCPA Cookie Consent <= 7.5.1 - Unauthenticated Information Exposure ↗
   2026-07-22 CVE-2026-65498 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 7.5.1 Patched in 7.5.2
6. Patched Medium · 5.3 Complianz – GDPR/CCPA Cookie Consent <= 7.4.5 - Missing Authorization to Unauthenticated Private Post Content Disclosure via Consent Area REST Endpoint ↗
   2026-04-28 CVE-2026-4019 Missing Authorization Affects <= 7.4.5 Patched in 7.4.6
7. Patched Medium · 4.9 Complianz – GDPR/CCPA Cookie Consent <= 7.4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Filter ↗
   2026-03-25 CVE-2026-2389 Improper Neutralization of Input During Web Page Generation Affects <= 7.4.4.2 Patched in 7.4.5
8. Patched Medium · 6.4 Complianz | GDPR/CCPA Cookie Consent <= 7.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2026-02-17 CVE-2025-11185 Improper Neutralization of Input During Web Page Generation Affects <= 7.4.3 Patched in 7.4.4
9. Patched Medium · 4.3 Complianz – GDPR/CCPA Cookie Consent <= 6.5.6 - Cross-Site Request Forgery to Data Request Deletion ↗
   2024-03-01 CVE-2024-1592 Cross-Site Request Forgery Affects <= 6.5.6 Patched in 7.0.0
10. Patched Medium · 4.4 Complianz | GDPR/CCPA Cookie Consent <= 6.5.5 - Authenticated(Administrator+) Stored Cross-site Scripting via settings ↗
    2024-01-03 CVE-2023-6498 Improper Neutralization of Input During Web Page Generation Affects <= 6.5.5 Patched in 6.5.6
11. Patched Medium · 6.1 Complianz <= 6.4.4 (Premium <= 6.4.6.1) - Cross-Site Request Forgery to Stored Cross-Site Scripting ↗
    2023-06-21 CVE-2023-33333 Cross-Site Request Forgery Affects <= 6.4.4 Patched in 6.4.5
12. Patched Medium · 4.3 Complianz <= 6.4.5 (Premium <= 6.4.7) - Cross-Site Request Forgery ↗
    2023-06-20 CVE-2023-34030 Cross-Site Request Forgery Affects <= 6.4.5 Patched in 6.4.6
13. Patched Medium · 4.3 Complianz | GDPR/CCPA Cookie Consent <= 6.4.5 - Cross-Site Request Forgery ↗
    2023-05-30 CVE-2023-34030 Cross-Site Request Forgery Affects < 6.4.6 Patched in 6.4.6
14. Patched Medium · 4.3 Complianz - GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via maybe_install_suggested_plugins ↗
    2023-05-12 CVE-2023-33333 Cross-Site Request Forgery Affects <= 6.4.4 Patched in 6.4.5
15. Patched Medium · 6.1 Complianz - GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via ajax_script_save ↗
    2023-05-12 CVE-2023-33333 Cross-Site Request Forgery Affects <= 6.4.4 Patched in 6.4.5
16. Patched Medium · 4.3 Complianz - GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via ajax_create_pages ↗
    2023-05-12 CVE-2023-33333 Cross-Site Request Forgery Affects <= 6.4.4 Patched in 6.4.5
17. Patched Medium · 4.3 Complianz - GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via ajax_edit_item ↗
    2023-05-12 CVE-2023-33333 Cross-Site Request Forgery Affects <= 6.4.4 Patched in 6.4.5
18. Patched Medium · 6.1 Complianz - GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via ajax_script_add ↗
    2023-05-12 CVE-2023-33333 Cross-Site Request Forgery Affects <= 6.4.4 Patched in 6.4.5
19. Patched Medium · 5.4 Complianz - GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via ajax_delete_snapshot ↗
    2023-05-12 CVE-2023-33333 Cross-Site Request Forgery Affects <= 6.4.4 Patched in 6.4.5
20. Patched Medium · 4.3 Complianz - GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via run_sync ↗
    2023-05-12 CVE-2023-33333 Cross-Site Request Forgery Affects <= 6.4.4 Patched in 6.4.5
21. Patched Medium · 4.3 Complianz - GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via cmplz_duplicate_cookiebanner ↗
    2023-05-12 Cross-Site Request Forgery Affects <= 6.4.4 Patched in 6.4.5
22. Patched Medium · 4.3 Complianz - GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via cmplz_delete_cookiebanner ↗
    2023-05-12 Cross-Site Request Forgery Affects <= 6.4.4 Patched in 6.4.5
23. Patched Medium · 6.4 Complianz - GDPR/CCPA Cookie Consent <= 6.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2023-03-06 CVE-2023-1069 Improper Neutralization of Input During Web Page Generation Affects <= 6.4.1 Patched in 6.4.2
24. Patched High · 8.8 Complianz Free <= 6.3.3 & Premium <= 6.3.5 - SQL Injection via Translations ↗
    2022-10-17 CVE-2022-3494 Improper Neutralization of Special Elements used in an SQL Command Affects <= 6.3.3 Patched in 6.3.4
25. Patched Medium · 6.1 Complianz - GDPR/CCPA Cookie Consent <= 5.5.2 - Reflected Cross-Site Scripting via s parameter ↗
    2022-01-17 CVE-2022-0193 Improper Neutralization of Input During Web Page Generation Affects < 6.0.0 Patched in 6.0.0

Translated into 61 languages, 18 at 90% or more

Plus 37 more locales with partial translations.

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2024-05-21 900K+ → 1M+ up after 94 days in tier
2. 2024-02-17 800K+ → 900K+ up after 116 days in tier
3. 2023-10-24 700K+ → 800K+ up after 130 days in tier
4. 2023-06-16 600K+ → 700K+ up after 112 days in tier
5. 2023-02-24 500K+ → 600K+ up after 97 days in tier
6. 2022-11-19 400K+ → 500K+ up after 79 days in tier
7. 2022-09-01 300K+ → 400K+ up after 183 days in tier
8. 2022-03-02 200K+ → 300K+ up after 274 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Complianz GDPR/CCPA Cookie Consent Banner into a readme, a review or a deck. It updates itself.

Complianz GDPR/CCPA Cookie Consent Banner: 1M+ active installs, 4.7★ (1,667 reviews). Plugin Pulse (WP Mayor), as of 2026-11-02. https://plugins.wpmayor.com/plugin/complianz-gdpr