PluginScore

Lightweight Cookie Notice – Cookie Banner for Cookie Consent

This is the free version of Lightweight Cookie Notice, the lightweight and customizable cookie plugin for WordPress.

v1.21DAEXTUpdated Added 5k+ installs100% rating
CCPAGDPRcookie bannercookie consentcookie notice
84
Score
8
Errors
18
Warnings
+0
Change

Category Scores

Security75
Repo100
Performance100
Maintainability87

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

26 findings

Maintainability

16

6 issue groups

Security

10

2 issue groups

WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $db_table used in $wpdb->get_results()\n$db_table used without escaping.8
Category
Security
Occurrences
8
Severity
warning

Sample message

Unescaped parameter $db_table used in $wpdb->get_results()\n$db_table used without escaping.

PluginCheck.Security.DirectDB.UnescapedDBParameter
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;8
Category
Maintainability
Occurrences
8
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protectionReference
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wpsc_add_cookie".3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wpsc_add_cookie".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DAEXTLWCN_EDITION".2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DAEXTLWCN_EDITION".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['script_body']2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['script_body']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "sanitize_category_state".1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "sanitize_category_state".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound
WARNINGMaintainabilitymismatched plugin namePlugin name "Lightweight Cookie Notice - Cookie Banner for Cookie Consent" is different from the name declared in plugin header "Lightweight Cookie Notice".1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "Lightweight Cookie Notice - Cookie Banner for Cookie Consent" is different from the name declared in plugin header "Lightweight Cookie Notice".

mismatched_plugin_nameReference
WARNINGMaintainabilitymissing composer json fileThe "/vendor" directory using composer exists, but "composer.json" file is missing.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The "/vendor" directory using composer exists, but "composer.json" file is missing.

missing_composer_json_fileReference

External Connections

Potential connections found in static code analysis.

26 domains

Outbound calls

196

External assets

0

Incoming endpoints

9

Notable Domains

daext.com15 · outbound
en.wikipedia.org9 · outbound
stackoverflow.com5 · outbound
dev.maxmind.com4 · outbound
react-select.com4 · outbound
api.hostip.info3 · outbound

Platform / Reference Domains

github.com73 · platform/reference
w3.org57 · platform/reference
opensource.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

/wp-json/lightweight-cookie-notice-free/v1/consent-log/REST

register_rest_route

/wp-json/lightweight-cookie-notice-free/v1/nonce/REST

register_rest_route

/wp-json/lightweight-cookie-notice-free/v1/optionsREST

register_rest_route

/wp-json/lightweight-cookie-notice-free/v1/read-options/REST

register_rest_route

wp_ajax_nopriv_daextlwcnf_geolocate_userpublic

wp_ajax

wp_ajax_nopriv_daextlwcnf_save_consent_logpublic

wp_ajax

Admin AJAX endpoints3
wp_ajax_daextlwcnf_geolocate_userauthenticated

wp_ajax

wp_ajax_daextlwcnf_get_category_dataauthenticated

wp_ajax

wp_ajax_daextlwcnf_save_consent_logauthenticated

wp_ajax

Score History

3 score snapshots

+1
1007550250Jun 21, 2026, 06:28 AM UTC Score 83/100 Plugin v1.19 Plugin Check 2.0.0 9 errors, 18 warningsJun 24, 2026, 01:59 PM UTC Score 84/100 Plugin v1.20 Plugin Check 2.0.0 8 errors, 18 warningsJun 26, 2026, 08:51 AM UTC Score 84/100 Plugin v1.21 Plugin Check 2.0.0 8 errors, 18 warningsJun 21, 2026Jun 26, 2026

v1.21

84

Latest

Findings
26
Errors
8
Warnings
18
Check
2.0.0

v1.20

84

Score

Findings
26
Errors
8
Warnings
18
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins

Disable Emojis (GDPR friendly)

60k+ active installs

100
EU Withdrawal Compliance

900 active installs

100
Show Me The Cookies

700 active installs

100
WF Cookie Consent

10k+ active installs

100
WS Form LITE – Drag & Drop Contact Form Builder

10k+ active installs

100
Usercentrics Privacy Policy Generator

600 active installs

99