iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more

85 Quality Score

Active Installs

24/30

With 200,000 active installs it is well established, though it trails category leaders like Complianz and CookieYes which each exceed 1,000,000 installs.

Update Freshness

25/25

Last updated June 2026 and tested through WordPress 7.0, giving a perfect maintenance score and indicating active, current development.

User Rating

14/15

A 94 out of 100 across 393 reviews reflects strong user satisfaction, putting it ahead of most alternatives on raw rating quality.

Support Health

8/15

Only 2 support threads with 0% resolution is a meaningful red flag, suggesting either very low ticket volume or sluggish responses on the WordPress.org forum.

WP Compatibility

15/15

Requires PHP 7.0 and WordPress 5.0 as minimums, which is conservative and broadly compatible with virtually any current hosting environment.

Scores higher than 96% of indexed plugins

About

The solution for GDPR compliance + more. Get your cookie banner, privacy policy, terms and conditions and handle cookie consent in just one plugin.

Active Installs 200k+

Rating ★★★★½ 4.7/5

Last Updated 2026-09-01 8:22am GMT

Requires WordPress 5.0+

Tested Up To 7.1

Requires PHP 7.0.0+

Security History

6 known vulnerabilities, all patched

5 High 1 Medium

Most recent: September 4, 2026

View details ▸

iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.13.4 - Unauthenticated Stored Cross-Site Scripting via Comment Content High

September 4, 2026 Patched in ["3.13.5"] CVE-2026-77263

iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.13.4 - Unauthenticated Stored Cross-Site Scripting via Comment Content via AdSense Regex Rewrite High

September 4, 2026 Patched in ["3.13.5"] CVE-2026-77233

iubenda <= 3.3.2 - Authenticated (Subscriber+) Privilege Escalation High

December 12, 2022 Patched in ["3.3.3"] CVE-2022-3911

iubenda <= 3.3.2 - Cross-Site Request Forgery High

December 6, 2022 Patched in ["3.3.3"]

iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.0.8 - Server-Side Request Forgery High

June 17, 2022 Patched in ["3.0.8"]

iubenda < 2.3.5 - Failure to Restrict URL Protocol Medium

May 12, 2020 Patched in ["2.3.5"] CVE-2020-12742

What It Does

iubenda delivers an integrated compliance toolkit for WordPress sites, bundling a configurable cookie banner, privacy policy generator, terms and conditions builder, and consent management within a single plugin. It handles GDPR and CCPA requirements by detecting scripts, blocking cookies until consent is given, and logging user preferences. The plugin connects to iubenda's hosted service, so much of the legal text generation and updates happen outside of WordPress.

Who It's For

This plugin fits small to mid-sized businesses, agencies, and site owners who need a turnkey privacy and cookie compliance solution without assembling multiple separate tools or writing legal copy from scratch. It is particularly useful for sites serving EU or California visitors that want one vendor to handle policies, cookie consent, and terms. Publishers, SaaS companies, and ecommerce stores with limited legal resources will get the most value.

Who Should Skip It

Sites that only need a basic cookie notice without privacy policy or terms generation should pick a lighter free plugin, since iubenda's fuller feature set and external service dependency may be overkill. Developers who prefer fully self-hosted, open-source compliance tooling with no third-party dashboard will also be better served by alternatives like Complianz.

The Bottom Line

iubenda earns an 85.34 overall quality score driven by excellent maintenance, high user ratings, and broad compatibility, making it a solid choice for owners who want an all-in-one compliance bundle. The unresolved support threads and reliance on an external hosted service are real trade-offs worth weighing. For most small and mid-sized sites serving regulated audiences, it is a dependable, low-friction option.

Related Plugins

GDPR Cookie Compliance 93/100

Pick this over iubenda if you have 300,000 fellow users' confidence in a simpler free cookie banner and do not need bundled policy generation.

Complianz 92/100

Choose Complianz for a fully self-hosted, open-source approach with 1,000,000 installs and no dependency on an external legal service.

Matomo Analytics 91/100

Opt for Matomo when privacy-first analytics is the core need rather than cookie consent and legal policy generation.

CookieYes 89/100

CookieYes is the better pick for sites wanting the largest install base and a proven cookie banner workflow, backed by 1,000,000 installs.

Compliance by Hu-manity.co 89/100

Choose Hu-manity.co if you want a community-driven consent solution with 900,000 installs and a different philosophical approach to data ownership.