WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode

Explore WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode vulnerabilities across all versions. Currently tracking 15 known vulnerabilities, including severity, impact, and patch status.

01234567891002.08.2019Today04.03.20226.3Freemius SDK <= 2.4.2 - Missing Authorization Checks CVSS 6.3 · 04.03.202220.06.20236.4WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 2.2.5 - Authenticated(Administrator+) CSV Injection CVSS 6.4 · 20.06.202316.04.20245.3WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.0.2 - Missing Authorization to Unauthenticated Arbitrary Post Deletion CVSS 5.3 · 16.04.202425.06.20247.2WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.2.0 - Unauthenticated Stored Cross-Site Scripting via Client-IP header CVSS 7.2 · 25.06.202411.12.20244.3Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) <= 3.6.5 - Missing Authorization to Authenticated (Subscriber+) Whitelist Script CVSS 4.3 · 11.12.202405.06.20254.3WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 3.8.0 - Cross-Site Request Forgery CVSS 4.3 · 05.06.202508.11.20254.3Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.0.3 - Missing Authorization CVSS 4.3 · 08.11.202515.12.20255.3Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.0.7 - Missing Authorization CVSS 5.3 · 15.12.202516.12.20255.3Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.0.7 - Missing Authorization to Unauthenticated Arbitrary Post Deletion CVSS 5.3 · 16.12.202530.12.20255.3Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.0.3 - Missing Authorization CVSS 5.3 · 30.12.202518.02.20267.5Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.1.2 - Missing Authorization to Sensitive Information Exposure CVSS 7.5 · 18.02.202602.07.20264.9Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Administrator+) SQL Injection via 's' Parameter CVSS 4.9 · 02.07.202609.07.20264.3Cookie Banner for GDPR / CCPA <= 4.3.6 - Missing Authorization to Authenticated (Subscriber+) Scan Schedule Modification via gcc_save_schedule_scan AJAX Action CVSS 4.3 · 09.07.20264.9Cookie Banner for GDPR / CCPA <= 4.3.6 - Authenticated (Administrator+) SQL Injection via 'scan_id' Parameter CVSS 4.9 · 09.07.202627.07.20264.3Cookie Banner for GDPR / CCPA – WPLP Cookie Consent <= 4.3.7 - Cross-Site Request Forgery via Bulk Action to Delete/Resolve Entries CVSS 4.3 · 27.07.2026

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

15

Get automatic notifications for all WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode vulnerabilities before they are exploited.

Vulnerability Records

15 records
2026-07-27 16:38CVE-2026-15136
4.3
Medium
Wordfence PRISMYes
2026-07-09 19:08CVE-2026-14475
4.9
Medium
Wordfence PRISMYes
2026-07-09 19:07CVE-2026-12955
4.3
Medium
Wordfence PRISMYes
2026-07-02 12:57CVE-2026-12920
4.9
Medium
Wordfence PRISMYes
2026-02-18 14:54CVE-2025-11754
7.5
High
Rafshanzani SuhadaYes
2025-12-30 00:00CVE-2025-66080
5.3
Medium
Legion HunterYes
2025-12-16 17:48CVE-2025-14061
5.3
Medium
shark3yYes
2025-12-15 00:00CVE-2025-66133
5.3
Medium
Legion HunterYes
2025-11-08 00:00CVE-2025-66075
4.3
Medium
Legion HunterYes
2025-06-05 00:00CVE-2025-49285
4.3
Medium
domiee13Yes
Showing 1–10 of 15 reports
WPLP Cookie Consent – Cookie Banner &amp; Consent Management for GDPR, CCPA &amp; Google Consent Mode banner
Latestv4.3.8

WPLP Cookie Consent – Cookie Banner &amp; Consent Management for GDPR, CCPA &amp; Google Consent Mode

WP Legal Pages

Author

WP Legal Pages

4.7(49)
94/100
Last Updated
2026-07-22 (7d ago)
Active Installs
9,000+
Downloads
629,685
Requires WP
3.3.1+
Requires PHP
7.0+
Tested up to
WP 7.0.2
Created
2019-08-02 (7y ago)

Trusted by 30,000+ WordPress sites · IAB Europe TCF v2.3 Registered · Google Certified CMP Partner · Setup in under 5 minutes, no coding required · No traffic caps or visitor-based pricing. WPLP Cookie Consent is a free WordPress cookie consent plugin that adds a customizable cookie banner, blocks third-party scripts until visitors consent, and keeps your cookie disclosures accurate with a built-in cookie scanner. Help meet GDPR, CCPA/CPRA, ePrivacy, UK GDPR, LGPD, POPIA, PIPEDA and other global privacy law requirements – with consent records stored on your own site, not a third-party dashboard. WPLP Cookie Consent is the core consent management module of the WPLP Compliance Platform, the same platform that also powers WPLP’s legal policy generators. Cookie consent and legal documentation are built on one connected system, so your cookie banner, cookie scan results, and cookie policy page all stay in sync instead of living in separate, disconnected tools. The plugin is built to be easy to configure out of the box, while still giving you the depth of controls needed to understand exactly what cookies your site uses and manage consent for each one. ✅ Why Choose WPLP Cookie Consent Built-in cookie scanner – automatically detects cookies and third-party scripts running on your site, no manual auditing required Automatic script & content blocking – stops Google Analytics, Meta/Facebook Pixel, Google Ads, Microsoft Clarity, TikTok Pixel, LinkedIn Insight Tag, and social embeds from loading until a visitor consents Google Consent Mode v2 – keep Google Ads and Analytics working correctly while respecting visitor consent signals Consent logging – stores consent status, category, and timestamp for audit-ready records, kept on your own WordPress database Drag & drop banner builder – match your brand with custom colors, layouts, fonts, and button text, no CSS required Free tier includes real compliance tools – cookie scanning and script blocking aren’t locked behind a paywall No visitor-based limits – no traffic caps, pageview limits, or per-visitor pricing WP Consent API support – shares visitor consent state with compatible WordPress plugins ⚖️ Why Choose WPLP Cookie Consent Over a SaaS CMP Most cookie consent platforms are hosted SaaS tools that charge by pageviews or monthly visitors and keep your consent records on their servers. WPLP Cookie Consent works differently: it runs entirely inside WordPress, stores every consent record in your own database, and never caps how much traffic your site gets. You get real compliance tooling – cookie scanning, script blocking, and consent logging in the free plugin, with no per-visitor pricing and no third-party dashboard to depend on. 📄 Features Customizable Cookie Consent Banner Configure a cookie banner that matches your site’s design and your specific consent requirements: Multiple banner layouts and positions (bar, box, popup) Customizable text, colors, and button labels to match your branding Category-based consent for analytics, marketing, and functional cookies Optional explicit Accept or Reject actions for visitors A preference center that lets visitors reopen the banner and change their choices by category at any time Per-service consent toggles that let visitors approve or block individual tracking services, not just categories Accessibility-friendly banner designed to follow WCAG / ADA guidelines CCPA / CPRA “Do Not Sell or Share My Personal Information” opt-out link for California visitors Cookie Scanning and Detection A built-in cookie scanner automatically detects cookies and third-party services running on your website, so your disclosures stay accurate as your site evolves. The scanner helps you: Identify cookies and scripts added by commonly used services and plugins Group detected cookies by category for clearer visitor-facing disclosure Keep cookie information up to date as your site changes over time Scan results feed directly into your cookie policy and consent configuration, so what you disclose always reflects what’s actually running on your site. Automatic Script and Content Blocking The plugin prevents non-essential third-party scripts from loading until a visitor gives consent, covering: Analytics tools like Google Analytics and Google Tag Manager Advertising and marketing scripts, including Meta (Facebook) Pixel and TikTok Pixel Embedded media and social content such as YouTube, Vimeo, Google Maps, and social embeds Script blocking works whether scripts are added directly, through another plugin, or via a tag manager. Google Consent Mode v2 is supported out of the box, so Google services can adjust their behavior automatically based on visitor consent signals. ⭐ Premium Features Unlock advanced consent management by upgrading to a WPLP premium plan: Geo-targeted banners – show region-specific consent banners for the EU, US/California, Canada, Brazil, and other regions IAB TCF v2.3 framework – full Transparency & Consent Framework support for publishers and programmatic advertising Google Consent Mode v2 advanced integration and Additional Consent support Additional banner languages and auto-translation for multilingual sites A/B testing to compare banner designs and improve consent rates Priority premium support 🆓 Free vs Premium Everything you need to run compliant cookie consent is in the free plugin, there is no locked-down “lite” experience. Free plugin includes: customizable cookie banner, built-in cookie scanner, automatic script and content blocking, category-based consent, preference center, consent logging stored in your own database, Google Consent Mode v2, WP Consent API support, and multilingual compatibility. Premium adds: geo-targeted regional banners, IAB TCF v2.3 framework, A/B testing for banners, and priority support. 🛡️ Supported Privacy Laws & Regulations WPLP Cookie Consent helps you build a cookie consent workflow aligned with major privacy laws around the world, including: General Data Protection Regulation (GDPR) – European Union California Consumer Privacy Act / CPRA (CCPA) – California, USA UK GDPR – United Kingdom ePrivacy Directive (ePD) – European Union Lei Geral de Proteção de Dados (LGPD) – Brazil Virginia Consumer Data Protection Act (VCDPA) – Virginia, and more… Laws and requirements vary by jurisdiction and change over time. Consult a legal professional to confirm what applies to your website. 👥 Who Uses WPLP Cookie Consent Bloggers & publishers: running Google Analytics, AdSense, or affiliate tracking WooCommerce & eCommerce stores: needing cookie compliance alongside checkout and ad tracking Membership & online course sites: managing logged-in user consent alongside marketing cookies Agencies & developers: managing consistent cookie consent setups across multiple client sites News & media sites: with heavy embedded content and third-party ad networks Multilingual & global sites: needing region-specific banners and translated consent text ⚙️ Setup and Compatibility Guided setup wizard for fast configuration Works with popular themes and page builders (Elementor, Divi, Gutenberg) Compatible with WooCommerce, Easy Digital Downloads, Google Tag Manager Works alongside common form plugins (WPForms, Gravity Forms, Contact Form 7) Translation-ready and compatible with popular multilingual plugins (WPML, Polylang) 📚 Documentation & Support Need help getting started? Our documentation covers everything from setup to troubleshooting. Overview: Learn about the WPLP Compliance Platform and its core features. Compliance Setup Wizard: Follow our step-by-step guide to configure your website for privacy compliance. Guides: Explore detailed guides and tutorials to make the most of the plugin’s features. FAQs: Find answers to frequently asked questions and troubleshooting tips. For questions related to features or compatibility, you can contact the WPLP Legal Pages support team.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C