| #1 | CookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice) | 87 | 1 | 291 | 1m+ | | | Non-prefixed global variable |
| #2 | Real Cookie Banner: GDPR & ePrivacy Cookie Consent | 30 | 9 | 496 | 100k+ | | | Database parameter is not escaped |
| #3 | GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law | 33 | 47 | 382 | 300k+ | | | Non-prefixed global variable |
| #4 | Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode | 49 | 148 | 176 | 100k+ | | | Non-prefixed global variable |
| #5 | iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more | 60 | 405 | 271 | 200k+ | | | Text Domain Mismatch |
| #6 | Termly – GDPR/CCPA Cookie Consent Banner | 38 | 54 | 92 | 80k+ | | | Non-prefixed global variable |
| #7 | Beautiful Cookie Consent Banner | 41 | 33 | 76 | 40k+ | | | Non-prefixed global variable |
| #8 | WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) | 99 | | 6 | 100k+ | | | trademarked term |
| #9 | WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode | 25 | 1,250 | 1,929 | 10k+ | | | Non-prefixed global variable |
| #10 | GDPR Compliance & Cookie Consent | 35 | 251 | 61 | 4k+ | | | Output is not escaped |
| #11 | My Agile Privacy® – CMP, Cookie Consent & Privacy Tools | 24 | 1,329 | 705 | 7k+ | | | Text Domain Mismatch |
| #12 | consentmanager Cookie Banner | 98 | 6 | 0 | 5k+ | | | wp function not compatible with requires wp |
| #13 | BST DSGVO Cookie | 39 | 61 | 7 | 5k+ | | | Unsafe printing function |
| #14 | Seers AI | Cookie Consent Banner – GDPR & CCPA Compliant Consent Management Platform | 25 | 1,446 | 421 | 1k+ | | | Output is not escaped |
| #15 | SureCookie – Cookie Consent Banner, Cookie Scanner & Script Blocking | 88 | 44 | 49 | 10k+ | | | Missing Arg Domain |
| #16 | GDPR CCPA Compliance & Cookie Consent Banner | 33 | 622 | 87 | 1k+ | | | Non Singular String Literal Domain |
| #17 | Lightweight Cookie Notice – Cookie Banner for Cookie Consent | 84 | 8 | 18 | 5k+ | | | Database parameter is not escaped |
| #18 | Ilmenite Cookie Consent | 77 | 6 | 11 | 2k+ | | | Setting is missing a sanitization callback |
| #19 | UniConsent Cookie Consent CMP – Consent Manager | 42 | 150 | 19 | 1k+ | | | Unsafe printing function |
| #20 | Responsive Cookie Consent | 46 | 50 | 4 | 2k+ | | | Unsafe printing function |
| #21 | Lawwwing | Textos legales web y Banner de cookies | 90 | 31 | 13 | 700 | | | Text Domain Mismatch |
| #22 | clickskeks.at Cookiebanner | 41 | 21 | 18 | 500 | | | Unsafe printing function |
| #23 | CookieFox – Cookie Notice | 48 | 14 | 19 | 400 | | | Output is not escaped |
| #24 | Avacy CMP | 47 | 5 | 90 | 600 | | | Non-prefixed global variable |
| #25 | PrivacyBee – Datenschutz im Autopilot | 69 | 19 | 27 | 700 | | | Non-prefixed global variable |
| #26 | Kansleri Cookie Consent | 100 | | 0 | 400 | | | No open findings |
| #27 | CookieRay – Cookie Banner for Cookie Consent (GDPR/CCPA Compliant) | 100 | | 1 | 700 | | | mismatched plugin name |
| #28 | CookieFirst | GDPR Cookie Consent Banner | 98 | 5 | 0 | 400 | | | Missing direct file access protection |
