PLUGIN SECURITY

Is Cookie Law Info safe?

Cookie banner, cookie consent and cookie notice plugin for GDPR and CCPA. Auto cookie blocking, Consent Mode v2, policy pages and preference center.

What this plugin does

  • Slug: cookie-law-info
  • Author: CookieYes
  • 1000000+ active installs
  • 96/100 rating (3228 reviews on wordpress.org)
  • 50761596 all-time downloads
  • On WordPress.org since 2012-05-21

CCPAcookie bannercookie consentcookie noticeGDPR

Maintenance status

  • Latest known version: 3.5.4
  • Last updated: 2026-08-20 6:34am GMT
  • Tested up to WordPress: 7.1
  • Requires PHP: 5.6+
  • Max supported PHP (analyzed): 8.4

Known vulnerabilities

1 known CVE on file for Cookie Law Info. Reported between 2020 and 2020.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice) [cookie-law-info] < 1.8.3 Unknown < 1.8.3 1.8.3 2020-02-12 ✓ fixed in latest
CVE-2020-20633 CookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice) [cookie-law-info] < 1.8.3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 5.4 < 1.8.3 1.8.3 2020-02-11 ✓ fixed in latest

How to fix it

Keep Cookie Law Info updated — 3.5.4 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.