PLUGIN SECURITY
Is Custom Banners safe?
Publish your cookie banner or notice in minutes. Automatically scan cookies, and create policies to align with GDPR, CCPA, and Google Consent Mode.
What this plugin does
- Slug:
custom-banners - Author: Complianz
- 1000000+ active installs
- 94/100 rating (1655 reviews on wordpress.org)
- 32571771 all-time downloads
- On WordPress.org since 2018-06-26
CCPAcookie bannercookie consentcookie noticeGDPR
Maintenance status
- Latest known version: 3.5.4
- Last updated: 2026-08-31 12:06pm GMT
- Tested up to WordPress: 7.1
- Requires PHP: 7.4+
Known vulnerabilities
4 known CVEs on file for Custom Banners. Reported between 2014 and 2024.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-8799 | Custom Banners [custom-banners] <= 3.3 (unfixed + closed) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 3.3 | 3.3 | 2024-09-30 | ✓ fixed in latest |
| CVE-2021-4342 | Custom Banners [custom-banners] < 3.3 (closed) | — | Unknown | < 3.3 | 3.3 | 2023-06-07 | ✓ fixed in latest |
| CVE-2021-4407 | Custom Banners [custom-banners] < 3.3 (closed) | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 3.3 | 3.3 | 2021-03-01 | ✓ fixed in latest |
| — | Custom Banners [custom-banners] < 3.3 (closed) | — | Unknown | < 3.3 | 3.3 | 2021-02-18 | ✓ fixed in latest |
| CVE-2014-4724 | Custom Banners [custom-banners] < 2.1 (closed) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Unknown | < 2.1 | 2.1 | 2014-06-29 | ✓ fixed in latest |
| — | Custom Banners [custom-banners] < 3.3 (closed) | — | Unknown | < 3.3 | 3.3 | — | ✓ fixed in latest |
| — | Custom Banners [custom-banners] < 3.3 (closed) | — | Unknown | < 3.3 | 3.3 | — | ✓ fixed in latest |
How to fix it
Keep Custom Banners updated — 3.5.4 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- CookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice) — 1000000+ active installs — 96/100 (3229) — max PHP 8.4
- Cookie Compliance for WordPress – Cookie Consent, GDPR & CCPA — 900000+ active installs — 96/100 (3025) — max PHP 8.4
- GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law — 300000+ active installs — 92/100 (205) — max PHP 8.4
- iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more — 200000+ active installs — 94/100 (396) — max PHP 8.4
- WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) — 200000+ active installs — 96/100 (80)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.