Cookie Compliance for WordPress – Cookie Consent, GDPR & CCPA

Recent reviewers report ajax save errors, broken flipbooks, and unanswered support requests, a sharp turn from the older run of praise for easy setup and customization.

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

430 searches this plugin appeared in over the last 90 days, 20 listed. 365 left out as unrelated or noise (years, numbers, stray words). 1 of its tags isn't in the top 24 for their own search.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 39% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 39 days ago and a band this size takes about a year or more to cross, so the real count is still just under 900K.

1. ★★★★★ fotografus

   4mo ago

   The plugin does a decent job at its core function of blocking cookies before consent is given. However, its business model is incredibly frustrating for small business owners and those managing their own websites. Currently, Google Consent Mode v2 is a strict requirement for Google Ads and Google Analytics 4 to function correctly. While the free version of this plugin successfully blocks the scripts, it deliberately restricts the ability to send the “Granted” consent state back to Google unless you upgrade to the Pro tier. As a result, the free plan Compliance by Hu-manity.co completely paralyzes conversion tracking and analytics. The worst part is that you only discover this critical missing feature after wasting time on setup and debugging errors in Google Tag Assistant. For anyone relying on Google’s advertising tools for their marketing, the free tier is practically useless. I highly recommend looking for officially certified Google CMP partners who include Consent Mode v2 in their free plans instead.

   Read on wp.org ↗
2. ★★★★★ jeckllcradlesong

   4mo ago

   Been running the plugin for more than 6 months now without any issues.

   Read on wp.org ↗
3. ★★★★★ Corrado Prever

   6mo ago

   Il plugin “”Compliance by Hu-manity.co”” ultima versione 3.0.5 si comporta in modo davvero strano 1) la stessa versione del plugin se viene reinstallata cambia grafica 2) il salvataggio della posizione del banner top/bottom genera un errore ajax 3) abilitando wordfence tool su quella chiamata in whitelist l’errore scompare 4) anche disabilitando wordfence e cache dopo aver salvato senza errore faccio il refresh della pagina e di fatto non è stato recepito il salvataggio ed il banner finisce sempre bottom

   Read on wp.org ↗
4. ★★★★★ Luke

   8mo ago

   Installed it to handle the cookie notice on my site. The setup was pretty simple, and it started working right away. Good options to customize the banner, too. Overall works well for my needs. tnx devs.

   Read on wp.org ↗
5. ★★★★★ Umberto

   8mo ago

   I have a website with several flipbooks. When a user accepts or declines the banner, [Cookie Notice & Compliance for GDPR / CCPA] modifies a JavaScript file, and the flipbooks no longer load. I deactivated the plugin, and all the flipbooks are visible again and everything works properly.I asked for support, but no one responded.

   Read on wp.org ↗
6. ★★★★★ dendenzilla

   8mo ago

   After the, low, threshold is reached they will send you emails hinting that you’ll get fined and try to scare you into buying a pro license. Untrustworthy behavior.

   Read on wp.org ↗
7. ★★★★★ Silhouettist

   11mo ago

   I’m not a fan of increasingly of asking everybody to confirm increasingly complex cookie options. However, it must be done! This plugin works well, makes the job bearable, and even the basic version has lots of customisation options so you can make it blend well with the theme of your site.

   Read on wp.org ↗
8. ★★★★★ jgasba

   11mo ago

   Once again a notification is polluting the dashboard. “Microsoft Clarity Enforcement Begins October 31 — Add Consent Support Now”. I don’t really care and would prefer to ignore it. I click the dedicated link “Ignore notification”. Which does nothing, is hooked to no script and triggers no link. Is that a (recurring) bug or is there something I don’t know about those links?

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.1.4 Fix: On sites protected by a security plugin or firewall (such as WordFence), saving your settings after adding Google Tag Manager or analytics code could fail with a “403” error. The plugin now sends that code in a form 3.1.4
2. — Version 3.1.3 Fix: On sites that use SiteGround Speed Optimizer, LiteSpeed Cache, or Breeze to combine, defer, or minify JavaScript, the plugin now reliably keeps the Cookie Compliance script out of those optimizations — so the banner 3.1.3
3. — Version 3.1.2 Compatibility: Verified and confirmed compatible with WordPress 7.0. Fix: Banner position and banner size now save correctly on sites without a Cookie Compliance subscription — since 3.0.1 these settings appeared to save 3.1.2
4. — Version 3.1.1 Fix: The cookie compliance banner and per-form privacy consent prompts now render correctly on sites where Cloudflare Rocket Loader or a caching/optimizer plugin (WP Rocket, LiteSpeed Cache, Autoptimize, NitroPack, Jetpa 3.1.1
5. — Version 3.1.0 New: WP Consent API integration — Compliance now registers as the active Consent Management Platform under the WP Consent API when that plugin is installed, so cooperative plugins like WooCommerce, Google Site Kit, Burst 3.1.0
6. — Version 3.0.6 Tweak: The Consent Security Policy (CSP) warning on the Compliance settings page now clears immediately once a valid .htaccess is detected — reloading the page, clicking Purge Cache, or clicking Pull Configuration each r 3.0.6

All 6 disclosed vulnerabilities are patched in the current version (3.1.17). Sites still on an older version should update.

1. Patched Medium · 6.4 Cookie Notice & Compliance for GDPR / CCPA <= 2.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2025-11-21 CVE-2025-11186 Improper Neutralization of Input During Web Page Generation Affects <= 2.5.8 Patched in 2.5.9
2. Patched Medium · 6.4 Cookie Notice & Compliance for GDPR / CCPA <= 2.5.8 - Authenticated (Author+) Stored Cross-Site Scripting ↗
   2025-10-21 CVE-2025-67554 Improper Neutralization of Input During Web Page Generation Affects <= 2.5.8 Patched in 2.5.9
3. Patched Medium · 4.4 Cookie Notice & Compliance for GDPR / CCPA <= 2.4.17.1 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2024-08-15 CVE-2022-3399 Improper Neutralization of Input During Web Page Generation Affects <= 2.4.17.1 Patched in 2.4.18
4. Patched Medium · 6.4 Cookie Notice & Compliance for GDPR / CCPA <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cookies_revoke_shortcode' Shortcode ↗
   2023-03-06 CVE-2023-0823 Improper Neutralization of Input During Web Page Generation Affects <= 2.4.6 Patched in 2.4.7
5. Patched Medium · 6.4 Cookie Notice & Compliance for GDPR / CCPA <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cookies_policy_link' Shortcodes ↗
   2023-03-02 CVE-2023-24400 Improper Neutralization of Input During Web Page Generation Affects <= 2.4.6 Patched in 2.4.7
6. Patched Medium · 4.8 Cookie Notice & Compliance for GDPR / CCPA <= 2.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2021-08-30 CVE-2021-24569 Improper Neutralization of Input During Web Page Generation Affects < 2.1.2 Patched in 2.1.2

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 54 languages, 4 at 90% or more

Plus 30 more locales with partial translations.

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-09-22 900K+ → 800K+ down after 236 days in tier
2. 2026-01-29 1M+ → 900K+ down after 2526 days in tier
3. 2019-03-01 900K+ → 1M+ up after 90 days in tier
4. 2018-12-01 800K+ → 900K+ up after 91 days in tier
5. 2018-09-01 700K+ → 800K+ up after 91 days in tier
6. 2018-06-02 500K+ → 700K+ up after 92 days in tier
7. 2018-03-02 400K+ → 500K+ up after 203 days in tier
8. 2017-08-11 300K+ → 400K+ up after 156 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Cookie Compliance for WordPress – Cookie Consent, GDPR & CCPA into a readme, a review or a deck. It updates itself.

Cookie Compliance for WordPress – Cookie Consent, GDPR & CCPA: 800K+ active installs, 4.8★ (3,026 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/cookie-notice