| #1 | Simple Cookie Notice | 98 | 4 | 2 | 2k+ | | | Text Domain Mismatch |
| #2 | CookieFirst | GDPR Cookie Consent Banner | 98 | 5 | 0 | 500 | | | Missing direct file access protection |
| #3 | WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) | 97 | 3 | 6 | 200k+ | | | trademarked term |
| #4 | Simple GDPR Cookie Compliance | 97 | 10 | 16 | 6k+ | | | Non-prefixed global variable |
| #5 | Flexible Cookies | 97 | 5 | 39 | 4k+ | | | Non-prefixed global variable |
| #6 | CookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice) | 87 | | 298 | 1m+ | | | Non-prefixed global variable |
| #7 | Lightweight Cookie Notice – Cookie Banner for Cookie Consent | 84 | 8 | 18 | 5k+ | | | Database parameter is not escaped |
| #8 | Ilmenite Cookie Consent | 77 | 6 | 11 | 2k+ | | | Setting is missing a sanitization callback |
| #9 | CookieFox – Cookie Notice | 51 | 10 | 20 | 400 | | | Nonce verification recommended |
| #10 | Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode | 48 | 148 | 177 | 100k+ | | | Non-prefixed global variable |
| #11 | Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator | 48 | 43 | 83 | 8k+ | | | Missing direct file access protection |
| #12 | Cookie Notify | 42 | 15 | 54 | 400 | | | Input is not validated |
| #13 | BST DSGVO Cookie | 39 | 61 | 7 | 5k+ | | | Unsafe printing function |
| #14 | TRUENDO | GDPR Compliant Cookie Manager | 38 | 98 | 38 | 600 | | | Output is not escaped |
| #15 | Italy Cookie Choices (for EU Cookie Law & Cookie Notice) | 36 | 115 | 77 | 10k+ | | | Unsafe printing function |
| #16 | CookieHub – Cookie Consent Banner (DSGVO, CCPA, RGPD and GDPR compliance) | 35 | 34 | 49 | 3k+ | | | Output is not escaped |
| #17 | Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More | 27 | 165 | 432 | 100k+ | | | Non-prefixed global variable |
| #18 | Complianz GDPR/CCPA Cookie Consent Banner | 24 | 399 | 370 | 1m+ | | | Missing Arg Domain |
| #19 | DSGVO All in one for WP | 24 | 75 | 1,637 | 10k+ | | | Non-prefixed global variable |
