PLUGIN SECURITY
Is Gdpr Cookie Compliance safe?
Cookie notice banner for GDPR, CCPA, EU cookie law, data protection and privacy regulations and other cookie law and consent notice requirements on yo …
What this plugin does
- Slug:
gdpr-cookie-compliance - Author: Moove Agency
- 300000+ active installs
- 92/100 rating (205 reviews on wordpress.org)
- 13250162 all-time downloads
- On WordPress.org since 2018-04-18
CCPAcookie bannercookie consentdsgvoGDPR
Maintenance status
- Latest known version: 5.1.0
- Last updated: 2026-07-21 6:03am GMT
- Tested up to WordPress: 7.0.4
- Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
10 known CVEs on file for Gdpr Cookie Compliance.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-16613 | GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law [gdpr-cookie-compliance] < 5.1.0 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 5.1.0 | 5.1.0 | 2026-07-27 | ✓ fixed in latest |
| CVE-2023-4013 | GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law [gdpr-cookie-compliance] < 4.12.5 | Cross-Site Request Forgery (CSRF) | Medium 6.5 | < 4.12.5 | 4.12.5 | 2023-08-07 | ✓ fixed in latest |
| — | GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law [gdpr-cookie-compliance] < 4.0.3 | — | Unknown | < 4.0.3 | 4.0.3 | 2019-12-27 | ✓ fixed in latest |
| CVE-2019-25143 | GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law [gdpr-cookie-compliance] < 4.0.3 | Missing Authorization | Medium 5.4 | < 4.0.3 | 4.0.3 | 2019-12-27 | ✓ fixed in latest |
| — | GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law [gdpr-cookie-compliance] < 4.15.7 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.8 | < 4.15.7 | 4.15.7 | 0000-00-00 | ✓ fixed in latest |
| — | GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law [gdpr-cookie-compliance] < 4.15.7 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Low 3.5 | < 4.15.7 | 4.15.7 | 0000-00-00 | ✓ fixed in latest |
| — | GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law [gdpr-cookie-compliance] < 4.15.9 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Low 3.5 | < 4.15.9 | 4.15.9 | 0000-00-00 | ✓ fixed in latest |
| — | GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law [gdpr-cookie-compliance] < 4.0.3 | — | Unknown | < 4.0.3 | 4.0.3 | — | ✓ fixed in latest |
+ 8 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2019-25143 | GDPR Cookie Compliance <= 4.0.2 - Authenticated Settings Reset | — | Unknown | < 4.0.3 | 4.0.3 | — | ✓ fixed in latest |
| CVE-2025-1622 | GDPR Cookie Compliance < 4.15.7 - Admin+ Stored XSS | — | Unknown | < 4.15.7 | 4.15.7 | — | ✓ fixed in latest |
| CVE-2025-1621 | GDPR Cookie Compliance < 4.15.7 - Admin+ Stored XSS | — | Unknown | < 4.15.7 | 4.15.7 | — | ✓ fixed in latest |
| CVE-2025-1620 | GDPR Cookie Compliance < 4.15.7 - Admin+ Stored XSS | — | Unknown | < 4.15.7 | 4.15.7 | — | ✓ fixed in latest |
| CVE-2025-1619 | GDPR Cookie Compliance < 4.15.7 - Admin+ Stored XSS | — | Unknown | < 4.15.7 | 4.15.7 | — | ✓ fixed in latest |
| CVE-2025-1624 | GDPR Cookie Compliance < 4.15.9 - Admin+ Stored XSS | — | Unknown | < 4.15.9 | 4.15.9 | — | ✓ fixed in latest |
| CVE-2025-1623 | GDPR Cookie Compliance < 4.15.9 - Admin+ Stored XSS | — | Unknown | < 4.15.9 | 4.15.9 | — | ✓ fixed in latest |
| CVE-2025-2205 | GDPR Cookie Compliance < 4.15.7 - Authenticated (Admin+) Stored Cross-Site Scripting | — | Unknown | < 4.15.7 | 4.15.7 | — | ✓ fixed in latest |
How to fix it
Keep Gdpr Cookie Compliance updated — 5.1.0 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- CookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice) — 1000000+ active installs — 96/100 (3229) — max PHP 8.4
- Complianz GDPR/CCPA Cookie Consent Banner — 1000000+ active installs — 94/100 (1655) — max PHP 8.4
- Cookie Compliance for WordPress – Cookie Consent, GDPR & CCPA — 900000+ active installs — 96/100 (3025) — max PHP 8.4
- iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more — 200000+ active installs — 94/100 (396) — max PHP 8.4
- WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) — 200000+ active installs — 96/100 (80)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.