Cookie Compliance for WordPress – Cookie Consent, GDPR & CCPA

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 39% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

Recent reviewers report ajax save errors, broken flipbooks, and unanswered support requests, a sharp turn from the older run of praise for easy setup and customization.

1. ★★★★★ fotografus

   2mo ago

   The plugin does a decent job at its core function of blocking cookies before consent is given. However, its business model is incredibly frustrating for small business owners and those managing their own websites. Currently, Google Consent Mode v2 is a strict requirement for Google Ads and Google Analytics 4 to function correctly. While the free version of this plugin successfully blocks the scripts, it deliberately restricts the ability to send the “Granted” consent state back to Google unless you upgrade to the Pro tier. As a result, the free plan Compliance by Hu-manity.co completely paralyzes conversion tracking and analytics. The worst part is that you only discover this critical missing feature after wasting time on setup and debugging errors in Google Tag Assistant. For anyone relying on Google’s advertising tools for their marketing, the free tier is practically useless. I highly recommend looking for officially certified Google CMP partners who include Consent Mode v2 in their free plans instead.

   Read on wp.org ↗
2. ★★★★★ jeckllcradlesong

   2mo ago

   Been running the plugin for more than 6 months now without any issues.

   Read on wp.org ↗
3. ★★★★★ Corrado Prever

   3mo ago

   Il plugin “”Compliance by Hu-manity.co”” ultima versione 3.0.5 si comporta in modo davvero strano 1) la stessa versione del plugin se viene reinstallata cambia grafica 2) il salvataggio della posizione del banner top/bottom genera un errore ajax 3) abilitando wordfence tool su quella chiamata in whitelist l’errore scompare 4) anche disabilitando wordfence e cache dopo aver salvato senza errore faccio il refresh della pagina e di fatto non è stato recepito il salvataggio ed il banner finisce sempre bottom

   Read on wp.org ↗
4. ★★★★★ Luke

   5mo ago

   Installed it to handle the cookie notice on my site. The setup was pretty simple, and it started working right away. Good options to customize the banner, too. Overall works well for my needs. tnx devs.

   Read on wp.org ↗
5. ★★★★★ Umberto

   6mo ago

   I have a website with several flipbooks. When a user accepts or declines the banner, [Cookie Notice & Compliance for GDPR / CCPA] modifies a JavaScript file, and the flipbooks no longer load. I deactivated the plugin, and all the flipbooks are visible again and everything works properly.I asked for support, but no one responded.

   Read on wp.org ↗
6. ★★★★★ dendenzilla

   6mo ago

   After the, low, threshold is reached they will send you emails hinting that you’ll get fined and try to scare you into buying a pro license. Untrustworthy behavior.

   Read on wp.org ↗
7. ★★★★★ Silhouettist

   9mo ago

   I’m not a fan of increasingly of asking everybody to confirm increasingly complex cookie options. However, it must be done! This plugin works well, makes the job bearable, and even the basic version has lots of customisation options so you can make it blend well with the theme of your site.

   Read on wp.org ↗
8. ★★★★★ jgasba

   9mo ago

   Once again a notification is polluting the dashboard. “Microsoft Clarity Enforcement Begins October 31 — Add Consent Support Now”. I don’t really care and would prefer to ignore it. I click the dedicated link “Ignore notification”. Which does nothing, is hooked to no script and triggers no link. Is that a (recurring) bug or is there something I don’t know about those links?

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.1.4 Fix: On sites protected by a security plugin or firewall (such as WordFence), saving your settings after adding Google Tag Manager or analytics code could fail with a “403” error. The plugin now sends that code in a form 3.1.4
2. — Version 3.1.3 Fix: On sites that use SiteGround Speed Optimizer, LiteSpeed Cache, or Breeze to combine, defer, or minify JavaScript, the plugin now reliably keeps the Cookie Compliance script out of those optimizations — so the banner 3.1.3
3. — Version 3.1.2 Compatibility: Verified and confirmed compatible with WordPress 7.0. Fix: Banner position and banner size now save correctly on sites without a Cookie Compliance subscription — since 3.0.1 these settings appeared to save 3.1.2
4. — Version 3.1.1 Fix: The cookie compliance banner and per-form privacy consent prompts now render correctly on sites where Cloudflare Rocket Loader or a caching/optimizer plugin (WP Rocket, LiteSpeed Cache, Autoptimize, NitroPack, Jetpa 3.1.1
5. — Version 3.1.0 New: WP Consent API integration — Compliance now registers as the active Consent Management Platform under the WP Consent API when that plugin is installed, so cooperative plugins like WooCommerce, Google Site Kit, Burst 3.1.0
6. — Version 3.0.6 Tweak: The Consent Security Policy (CSP) warning on the Compliance settings page now clears immediately once a valid .htaccess is detected — reloading the page, clicking Purge Cache, or clicking Pull Configuration each r 3.0.6

6 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.4 Cookie Notice & Compliance for GDPR / CCPA <= 2.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2025-11-21 CVE-2025-11186 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.5.8 Patched in 2.5.9
2. Medium · 6.4 Cookie Notice & Compliance for GDPR / CCPA <= 2.5.8 - Authenticated (Author+) Stored Cross-Site Scripting ↗
   2025-10-21 CVE-2025-67554 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.5.8 Patched in 2.5.9
3. Medium · 4.4 Cookie Notice & Compliance for GDPR / CCPA <= 2.4.17.1 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2024-08-15 CVE-2022-3399 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.4.17.1 Patched in 2.4.18
4. Medium · 6.4 Cookie Notice & Compliance for GDPR / CCPA <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cookies_revoke_shortcode' Shortcode ↗
   2023-03-06 CVE-2023-0823 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.4.6 Patched in 2.4.7
5. Medium · 6.4 Cookie Notice & Compliance for GDPR / CCPA <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cookies_policy_link' Shortcodes ↗
   2023-03-02 CVE-2023-24400 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.4.6 Patched in 2.4.7
6. Medium · 4.8 Cookie Notice & Compliance for GDPR / CCPA <= 2.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2021-08-30 CVE-2021-24569 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 2.1.2 Patched in 2.1.2

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 53 languages, 6 at 90% or more

Plus 29 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-01-29 1M+ → 900K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Pressidium Cookie Consent 10K+ installs · 4.6★ · 4 shared tags B
• FAZ Cookie Manager 1K+ installs · 4.6★ · 4 shared tags B
• IL Privacy & Cookie Consent 100+ installs · 4.1★ · 4 shared tags B
• CookiePal Banner 100+ installs · 3.6★ · 4 shared tags B
• WP Consent API 200K+ installs · 4.1★ · 3 shared tags B
• Termly – GDPR/CCPA Cookie Consent Banner 80K+ installs · 3.7★ · 3 shared tags B

Embed this report card

Drop a live Pulse card for Cookie Compliance for WordPress – Cookie Consent, GDPR & CCPA into a readme, a review or a deck. It updates itself.

Cookie Compliance for WordPress – Cookie Consent, GDPR & CCPA: 900K+ active installs, 4.8★ (3,024 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/cookie-notice