Cookie Compliance for WordPress – Cookie Consent, GDPR & CCPA

88 Quality Score

Active Installs

26/30

With 900,000 active installs it sits comfortably in the top tier of consent plugins, though it trails the 1 million install marks set by Complianz and CookieYes.

Update Freshness

25/25

A recent update in July 2026, broad WordPress 7.0.1 compatibility, and a PHP 7.4 floor suggest the developer is actively maintaining the codebase.

User Rating

14/15

A 96 out of 100 score across 3,024 ratings is exceptional and indicates consistently positive user experiences.

Support Health

8/15

Only 2 total support threads with 0 resolved is a concern, though low volume can also mean few users encounter serious problems.

WP Compatibility

15/15

Tested against WordPress 7.0.1 and requiring only PHP 7.4 and WordPress 4.9.6, it runs on virtually every modern installation.

Scores higher than 98% of indexed plugins

About

Consent management platform for WordPress — GDPR, CCPA & ePrivacy consent, autoblocking, Google/Microsoft Consent Mode, GPC & WP Consent API.

Active Installs 800k+

Rating ★★★★½ 4.8/5

Last Updated 2026-09-23 11:02am GMT

Requires WordPress 4.9.6+

Tested Up To 7.0.6

Requires PHP 7.4+

Security History

6 known vulnerabilities, all patched

6 Medium

Most recent: November 21, 2025

View details ▸

Cookie Notice & Compliance for GDPR / CCPA <= 2.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Medium

November 21, 2025 Patched in ["2.5.9"] CVE-2025-11186

Cookie Notice & Compliance for GDPR / CCPA <= 2.5.8 - Authenticated (Author+) Stored Cross-Site Scripting Medium

October 21, 2025 Patched in ["2.5.9"] CVE-2025-67554

Cookie Notice & Compliance for GDPR / CCPA <= 2.4.17.1 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

August 15, 2024 Patched in ["2.4.18"] CVE-2022-3399

Cookie Notice & Compliance for GDPR / CCPA <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cookies_revoke_shortcode' Shortcode Medium

March 6, 2023 Patched in ["2.4.7"] CVE-2023-0823

Cookie Notice & Compliance for GDPR / CCPA <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cookies_policy_link' Shortcodes Medium

March 2, 2023 Patched in ["2.4.7"] CVE-2023-24400

Cookie Notice & Compliance for GDPR / CCPA <= 2.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

August 30, 2021 Patched in ["2.1.2"] CVE-2021-24569

What It Does

Compliance by Hu-manity.co displays cookie consent banners and records user consent choices to help WordPress sites meet GDPR, CCPA, CPRA, and ePrivacy requirements. It autoblocks third-party scripts until consent is given, supports Google Consent Mode v2 for analytics integration, and honours Global Privacy Control signals from browsers. A full consent log is stored per visitor for audit purposes.

Who It's For

This plugin is best for site owners in the EU, California, or other regulated jurisdictions who need verifiable, per-user consent records rather than just a banner. It suits publishers, ecommerce stores, and small-to-medium businesses that use Google Analytics or Ads and want their tags to respect user choices automatically. Privacy-conscious operators who want GPC support out of the box will also fit here.

Who Should Skip It

If your site does not serve visitors from regulated regions and collects no personal data, the legal overhead of a consent platform is unnecessary. Hobbyists, internal tools, and static brochures with no third-party trackers should skip this in favour of a lighter banner or nothing at all.

The Bottom Line

Compliance by Hu-manity.co delivers strong feature coverage and a near-perfect user rating at a sensible size, making it a solid pick for most regulated sites. The thin support footprint is the one real caveat, so buyers who anticipate needing hands-on help should weigh that against the quality elsewhere. For a free consent platform with Consent Mode v2 and GPC support, it punches above its 88.56 quality score.

Related Plugins

GDPR Cookie Compliance 93/100

Pick this if you want a more polished front-end banner builder and do not need the deeper GPC and Consent Mode v2 automation.

Complianz

Choose Complianz if you run multisite, need geo-targeted banners, or want built-in scanning to auto-detect cookies on your site.

Matomo Analytics 91/100

Go with Matomo if your main privacy concern is analytics itself and you would rather ditch Google than configure consent around it.

CookieYes 89/100

Pick CookieYes if you want the largest install base and a SaaS backend with scanner technology for cookie databases.

OMGF 86/100

Choose OMGF only as a complement, since it self-hosts Google Fonts to avoid a consent trigger rather than managing consent itself.