| #1 | Tracking and Consent Manager – WP Full Picture | 23 | 1,280 | 3,223 | 3k+ | | | Non-prefixed global variable |
| #2 | Cookie Banner for GDPR / CCPA – WPLP Cookie Consent | 24 | 1,209 | 1,931 | 9k+ | | | Non-prefixed global variable |
| #3 | Matomo Analytics – Powerful, Privacy-First Insights for WordPress | 19 | 1,909 | 878 | 100k+ | | | Exception output is not escaped |
| #4 | Opt-Out for Google Analytics (DSGVO / GDPR) | 24 | 290 | 1,978 | 3k+ | | | Non-prefixed global variable |
| #5 | Civic Cookie Control | 33 | 1,881 | 219 | 2k+ | | | Text Domain Mismatch |
| #6 | WP Frontend Delete Account | 24 | 537 | 1,378 | 4k+ | | | Non-prefixed global variable |
| #7 | Seers Ai | Consent Management Platform (Easy to set up GDPR/CCPA Compliant Cookie Consent) | 25 | 1,446 | 421 | 1k+ | | | Output is not escaped |
| #8 | My Agile Privacy® – CMP, Cookie Consent & Privacy Tools | 24 | 1,170 | 674 | 7k+ | | | Text Domain Mismatch |
| #9 | The GDPR Framework By Data443 | 23 | 1,287 | 517 | 10k+ | | | Short PHP open tag found |
| #10 | DSGVO All in one for WP | 24 | 75 | 1,637 | 20k+ | | | Non-prefixed global variable |
| #11 | Double Opt-In for Contact Form 7 & Avada – Secure, GDPR-Compliant Email Verification | 23 | 675 | 643 | 1k+ | | | Unsafe printing function |
| #12 | TermsFeed AutoTerms: Privacy Policy Generator, Cookie Consent, GDPR, CCPA, Terms & Conditions, Disclaimers, Cookies Policy, EULA | 24 | 939 | 161 | 70k+ | | | Non Singular String Literal Domain |
| #13 | SV Tracking Manager | 27 | 968 | 129 | 1k+ | | | Output is not escaped |
| #14 | Complianz – GDPR/CCPA Cookie Consent | 24 | 487 | 403 | 1m+ | | | Missing Arg Domain |
| #15 | GDPR CCPA Compliance & Cookie Consent Banner | 33 | 622 | 87 | 1k+ | | | Non Singular String Literal Domain |
| #16 | iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more | 60 | 405 | 271 | 200k+ | | | Text Domain Mismatch |
| #17 | Cookies and Content Security Policy | 35 | 261 | 412 | 10k+ | | | Output is not escaped |
| #18 | Real Cookie Banner: GDPR & ePrivacy Cookie Consent | 30 | 9 | 496 | 100k+ | | | Database parameter is not escaped |
| #19 | Compliance by Hu-manity.co | 31 | 153 | 335 | 900k+ | | | Missing nonce verification |
| #20 | Shariff Wrapper | 32 | 33 | 404 | 30k+ | | | Non-prefixed global variable |
| #21 | Privacy Policy Generator – WPLP Legal Pages | 32 | 26 | 409 | 10k+ | | | Non-prefixed global variable |
| #22 | GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law | 33 | 48 | 370 | 300k+ | | | Non-prefixed global variable |
| #23 | WP YouTube Lyte | 28 | 204 | 178 | 30k+ | | | Non-prefixed global variable |
| #24 | Smart Cookie Kit | 38 | 263 | 81 | 3k+ | | | Output is not escaped |
| #25 | Laposta Signup Basic | 28 | 275 | 66 | 2k+ | | | Output is not escaped |
| #26 | Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode | 49 | 148 | 176 | 100k+ | | | Non-prefixed global variable |
| #27 | GDPR Compliance & Cookie Consent | 35 | 251 | 61 | 4k+ | | | Output is not escaped |
| #28 | Pressidium Cookie Consent | 26 | 203 | 95 | 10k+ | | | Exception output is not escaped |
| #29 | CookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice) | 87 | 1 | 291 | 1m+ | | | Non-prefixed global variable |
| #30 | OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. | 32 | 211 | 64 | 300k+ | | | Output is not escaped |
| #31 | Quantcast Choice | 39 | 227 | 11 | 3k+ | | | Text Domain Mismatch |
| #32 | Cookie Information – Cookie Banner with Consent Mode v2 | 35 | 185 | 28 | 2k+ | | | Output is not escaped |
| #33 | CAOS | Host Google Analytics Locally | 38 | 124 | 44 | 10k+ | | | Output is not escaped |
| #34 | Yabe Webfont – Use Custom Fonts, Google Fonts or Adobe Fonts | 35 | 48 | 114 | 5k+ | | | Non-prefixed hook name |
| #35 | GDPR | 77 | 39 | 121 | 10k+ | | | Non-prefixed global variable |
| #36 | Termly – GDPR/CCPA Cookie Consent Banner | 38 | 54 | 92 | 80k+ | | | Non-prefixed global variable |
| #37 | tarteaucitron.io | 41 | 44 | 92 | 10k+ | | | Output is not escaped |
| #38 | Delete Me | 40 | 116 | 17 | 7k+ | | | Output is not escaped |
| #39 | Cookie Notice & Consent | 41 | 101 | 29 | 1k+ | | | Output is not escaped |
| #40 | CookieAdmin – Cookie Consent Banner | 37 | 43 | 86 | 400k+ | | | Nonce verification recommended |
| #41 | Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator | 47 | 44 | 83 | 10k+ | | | Missing direct file access protection |
| #42 | Beautiful Cookie Consent Banner | 41 | 33 | 76 | 40k+ | | | Non-prefixed global variable |
| #43 | GDPRess | Eliminate external requests to increase GDPR compliance | 39 | 60 | 26 | 1k+ | | | Output is not escaped |
| #44 | CookieHub – Cookie Consent Banner (DSGVO, CCPA, RGPD and GDPR compliance) | 42 | 33 | 49 | 3k+ | | | Output is not escaped |
| #45 | DSGVO Youtube | 41 | 48 | 29 | 1k+ | | | Unsafe printing function |
| #46 | Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR) | 39 | 28 | 45 | 80k+ | | | Missing nonce verification |
| #47 | EasyFonts – Host Google Fonts Locally, Fast & Auto-Optimize, GDPR Compliant | 47 | 5 | 58 | 1k+ | | | Interpolated SQL is not prepared |
| #48 | LegalBlink for Aruba | 91 | 33 | 29 | 6k+ | | | Missing direct file access protection |
| #49 | USERCENTRICS CMP | 56 | 44 | 11 | 1k+ | | | Non Singular String Literal Domain |
| #50 | Free Cookie Notice & Consent Banner for Privacy Compliance (GDPR, CCPA, DSGVO and others) | 40 | 39 | 15 | 6k+ | | | Missing direct file access protection |