My Agile Privacy® – CMP, Cookie Consent & Privacy Tools

My Agile Privacy® – CMP, Cookie Consent & Privacy Tools has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 2 are fixed as of October 2026. Their average CVSS score is 5.8, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for My Agile Privacy® – CMP, Cookie Consent & Privacy Tools has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. My Agile Privacy® – CMP, Cookie Consent & Privacy Tools is installed on roughly 7,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
5.8/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all My Agile Privacy® – CMP, Cookie Consent & Privacy Tools vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2023-51404

My Agile Privacy <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vis Shortcode

Read the full analysis

Vulnerability Records

2 records
My Agile Privacy® – CMP, Cookie Consent & Privacy Tools banner
Latestv3.4.0

My Agile Privacy® – CMP, Cookie Consent & Privacy Tools

Formula Agile

Author

Formula Agile

5.0(19)
100/100
Last Updated
2026-09-30 (28d ago)
Active Installs
7,000+
Downloads
281,054
Requires WP
4.4.0+
Requires PHP
5.6+
Tested up to
WP 7.1.3
Created
2021-10-02 (5y ago)

My Agile Privacy® is a self-hosted plugin that provides tools to manage cookie consent and to help align with data protection regulations. It supports compliance efforts with GDPR, Swiss FADP (nLPD/nFADP), PIPEDA, LGPD, CCPA/CPRA, CPA, CTDPA, DPDPA, ICDPA, INCDPA, KCDPA, MCDPA, MODPA, MTCDPA, NDPA, NRS 603A, NHPA, NJDPA, OCPA, RIDTPPA, TIPA, TDPSA, UCPA, and VCDPA. My Agile Privacy® is available in Albanian, Azerbaijani, Bosnian, Bulgarian, Catalan, Croatian, Czech, Danish, Dutch, English, Estonian, Finnish, French, German, Greek, Hungarian, Italian, Latvian, Lithuanian, Macedonian, Norwegian, Polish, Portuguese, Romanian, Russian, Serbian, Slovak, Slovenian, Spanish, Swedish, Turkish and Ukrainian. It supports multilingual sites using WPML, Polylang, TranslatePress, Weglot, or Falang. Key Features ⭐ Banner A/B testing: compare up to four banner designs on real visitors and apply the winner 🚀 Easy to use ⚡️ Highly customizable ⭐ Options to accept, reject and revisit consent 🚀 Granular user consent ⚡️ Cookie consent and personal data consent management ⭐ Support for GDPR, Swiss FADP (nLPD/nFADP), PIPEDA, LGPD, CCPA/CPRA, CPA, CTDPA, DPDPA, ICDPA, INCDPA, KCDPA, MCDPA, MODPA, MTCDPA, NDPA, NRS 603A, NHPA, NJDPA, OCPA, RIDTPPA, TIPA, TDPSA, UCPA, VCDPA 🚀 IAB TCF 2.4 support ⚡️ Google Consent Mode v2, Clarity and Microsoft UET Consent Mode support ⭐ Multilingual support at no extra cost (WPML, Polylang, TranslatePress, Weglot, Falang) 🚀 IAB GPP support: US National section ⚡️ Geolocation with per-country consent rules ⭐ Consent statistics: opt-in rate, rejections and trends, by country and device 🚀 WordPress Multisite support ⚡️ Runs on PHP 5.6 through 8.x Certified with Industry Standards My Agile Privacy® is certified by IAB, Google and Microsoft, ensuring that our solutions meet the highest industry standards. This certification underscores our commitment to delivering reliable, secure, and efficient tools that help you maintain compliance with ease and professionalism. IAB Global Privacy Platform (GPP) Ad vendors stop guessing. My Agile Privacy® publishes the visitor’s choice through the IAB GPP API, so every vendor on your page reads one signal instead of looking for cookies of its own. The string carries the US National section, and the European TCF section when IAB TCF is enabled. Our IAB CMP ID is 403. The signal stays closed until the visitor answers, so vendors know when to wait, and it updates the moment they change their mind. A Global Privacy Control signal from the browser is honoured as an opt-out. Geolocation Different countries, different rules. My Agile Privacy® resolves where the visitor is and applies the consent regime you set for that country: opt-in where consent must come first, opt-out where the law allows it. You decide which countries get which treatment. If the country cannot be determined, the strictest regime applies. A Global Privacy Control signal always wins: the banner is shown, and nothing is unblocked until the visitor chooses. Consent Statistics Know how your banner actually performs. My Agile Privacy® counts how many visitors see the cookie banner and what they do next: consent, rejection, no choice, or implicit consent where geolocation applies it. You get the opt-in rate, the rejection rate and the interaction rate, the trend over time, and a breakdown by country and by device. Consent changes can also be sent to Google Analytics 4 as events, when GA4 is installed on the site. What Web Agencies Say Features This tool allows you to make your website privacy-compliant through a guided process that is easy to use, even for non-experts. Using the Cookie Shield system, My Agile Privacy® scans your website, informing you about cookies and third-party services that need to be disclosed. Our solution is responsive and tested on desktop computers, tablets, and mobile devices. Privacy and Cookie Policy Generator Through a simple and guided interface, you can use pre-written policy templates to ensure compliance. The texts are automatically updated in case of regulatory changes or updates to legal references, and they are written by recognized and certified privacy professionals. Languages Our services are currently available in the following languages: – Albanian – Azerbaijani – Bosnian – Bulgarian – Catalan – Croatian – Czech – Danish – Dutch – English – Estonian – Finnish – French – German – Greek – Hungarian – Italian – Latvian – Lithuanian – Macedonian – Norwegian – Polish – Portuguese – Romanian – Russian – Serbian – Slovak – Slovenian – Spanish – Swedish – Turkish – Ukrainian Support and Updates My Agile Privacy® is regularly updated and maintained to ensure regulatory compliance. Our support —provided exclusively by humans, not chatbots or AI— can be reached here. Other links: * Official Website * Trustpilot Reviews * Facebook Reviews

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C