WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

Recent releases and news for this plugin

1. — Version 4.3.8 Improvements Improved cookie scanning reliability for better detection and scan completion. Bug Fixes Strengthened the codebase Fixed an issue where the cookie banner remained visible while editing pages with Beaver Buil 4.3.8
2. — Version 4.3.7 New New: Added built-in Google Tag Manager (GTM) integration for Google Consent Mode, simply enter your GTM Container ID to automatically install GTM on your website without requiring manual code insertion or a third-par 4.3.7
3. — Version 4.3.6 New Improved compatibility with The Plus Addons for Elementor Popup Builder / Offcanvas Widget to prevent conflicts with the cookie settings popup. Fixed Fixed a security vulnerability reported by Wordfence . Fixed an in 4.3.6
4. — Version 4.3.5 Introduced an AI-Powered Compliance Setup Wizard that helps users configure legal pages and cookie compliance settings based on their business type, website purpose, visitor locations, and applicable privacy laws. AI now 4.3.5
5. — Version 4.3.4 Minor bugfixes and improvements 4.3.4
6. — Version 4.3.3 New: Added an option in the WPLP SaaS dashboard to directly connect and manage your WordPress website with WP Cookie Consent. Fixed an issue where Cookie Banner text translations were not applied when Google Consent Mode 4.3.3

17 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.4 WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode <= 4.3.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting ↗
   2026-08-18 CVE-2026-73359 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.3.9 Patched in 4.4.0
2. High · 7.2 Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'regionArray' Parameter ↗
   2026-08-14 CVE-2026-13360 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.3.5 Patched in 4.4.0
3. Medium · 4.3 Cookie Banner for GDPR / CCPA – WPLP Cookie Consent <= 4.3.7 - Cross-Site Request Forgery via Bulk Action to Delete/Resolve Entries ↗
   2026-07-27 CVE-2026-15136 Cross-Site Request Forgery (CSRF) Affects <= 4.3.7 Patched in 4.3.8
4. Medium · 4.9 Cookie Banner for GDPR / CCPA <= 4.3.6 - Authenticated (Administrator+) SQL Injection via 'scan_id' Parameter ↗
   2026-07-09 CVE-2026-14475 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 4.3.6 Patched in 4.3.7
5. Medium · 4.3 Cookie Banner for GDPR / CCPA <= 4.3.6 - Missing Authorization to Authenticated (Subscriber+) Scan Schedule Modification via gcc_save_schedule_scan AJAX Action ↗
   2026-07-09 CVE-2026-12955 Missing Authorization Affects <= 4.3.6 Patched in 4.3.7
6. Medium · 4.9 Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Administrator+) SQL Injection via 's' Parameter ↗
   2026-07-02 CVE-2026-12920 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 4.3.5 Patched in 4.3.6
7. High · 7.5 Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.1.2 - Missing Authorization to Sensitive Information Exposure ↗
   2026-02-18 CVE-2025-11754 Missing Authorization Affects <= 4.1.2 Patched in 4.1.3
8. Medium · 5.3 Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.0.3 - Missing Authorization ↗
   2025-12-30 CVE-2025-66080 Missing Authorization Affects <= 4.0.3 Patched in 4.0.4
9. Medium · 5.3 Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.0.7 - Missing Authorization to Unauthenticated Arbitrary Post Deletion ↗
   2025-12-16 CVE-2025-14061 Missing Authorization Affects <= 4.0.7 Patched in 4.0.8
10. Medium · 5.3 Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.0.7 - Missing Authorization ↗
    2025-12-15 CVE-2025-66133 Missing Authorization Affects <= 4.0.7 Patched in 4.0.8
11. Medium · 4.3 Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.0.3 - Missing Authorization ↗
    2025-11-08 CVE-2025-66075 Missing Authorization Affects <= 4.0.3 Patched in 4.0.4
12. Medium · 4.3 WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 3.8.0 - Cross-Site Request Forgery ↗
    2025-06-05 CVE-2025-49285 Cross-Site Request Forgery (CSRF) Affects <= 3.8.0 Patched in 3.8.1
13. Medium · 4.3 Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) <= 3.6.5 - Missing Authorization to Authenticated (Subscriber+) Whitelist Script ↗
    2024-12-11 CVE-2024-11724 Missing Authorization Affects <= 3.6.5 Patched in 3.6.6
14. High · 7.2 WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.2.0 - Unauthenticated Stored Cross-Site Scripting via Client-IP header ↗
    2024-06-25 CVE-2024-4869 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.2.0 Patched in 3.3.0
15. Medium · 5.3 WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.0.2 - Missing Authorization to Unauthenticated Arbitrary Post Deletion ↗
    2024-04-16 CVE-2024-3599 Missing Authorization Affects <= 3.0.2 Patched in 3.1.0
16. Medium · 6.4 WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 2.2.5 - Authenticated(Administrator+) CSV Injection ↗
    2023-06-20 CVE-2023-23678 Improper Neutralization of Formula Elements in a CSV File Affects <= 2.2.5 Patched in 2.2.6
17. Medium · 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks ↗
    2022-03-04 CVE-2022-4974 Missing Authorization Affects < 2.1.1 Patched in 2.1.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 15 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-08-07 9K+ → 10K+ up after 105 days in tier
2. 2026-04-24 10K+ → 9K+ down after 3 days in tier
3. 2026-04-21 9K+ → 10K+ up after 1 days in tier
4. 2026-04-20 10K+ → 9K+ down after 199 days in tier
5. 2025-10-03 9K+ → 10K+ up after 102 days in tier
6. 2025-06-23 10K+ → 9K+ down after 39 days in tier
7. 2025-05-15 9K+ → 10K+ up after 64 days in tier
8. 2025-03-12 8K+ → 9K+ up after 68 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Crumbler – Cookie Consent 10+ installs · 3.6★ · 3 shared tags B
• C CookieLex Cookie Consent & Privacy Compliance — installs · 3.6★ · 3 shared tags B
• Consentify Script — installs · 3.6★ · 3 shared tags B
• CookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice) 1M+ installs · 4.8★ · 2 shared tags A
• Complianz GDPR/CCPA Cookie Consent Banner 1M+ installs · 4.7★ · 2 shared tags A
• GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law 300K+ installs · 4.5★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode into a readme, a review or a deck. It updates itself.

WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode: 10K+ active installs, 4.7★ (50 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/gdpr-cookie-consent