| #1 | CookieAdmin – Cookie Consent Banner | 37 | 43 | 86 | 400k+ | | | Nonce verification recommended |
| #2 | WS Form LITE – Drag & Drop Contact Form Builder | 100 | | 0 | 10k+ | | | No open findings |
| #3 | Cookie Banner for GDPR / CCPA – WPLP Cookie Consent | 24 | 1,214 | 1,924 | 9k+ | | | Non-prefixed global variable |
| #4 | GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law | 33 | 48 | 370 | 300k+ | | | Non-prefixed global variable |
| #5 | Asesor de Cookies RGPD para normativa europea | 37 | 92 | 87 | 20k+ | | | wp function not compatible with requires wp |
| #6 | CookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice) | 87 | 1 | 291 | 1m+ | | | Non-prefixed global variable |
| #7 | Termageddon: Cookie Consent & Privacy Compliance | 35 | 27 | 13 | 7k+ | | | Exception output is not escaped |
| #8 | Cookie Consent – GDPR & CCPA Cookie Banner & Consent Manager | 92 | | 16 | 10k+ | | | Direct Query |
| #9 | FAZ Cookie Manager | 70 | | 315 | 800 | | | Non-prefixed hook name |
| #10 | Real Cookie Banner: GDPR & ePrivacy Cookie Consent | 30 | 9 | 496 | 100k+ | | | Database parameter is not escaped |
| #11 | Laposta Signup Basic | 28 | 276 | 67 | 2k+ | | | Output is not escaped |
| #12 | Matomo Analytics – Powerful, Privacy-First Insights for WordPress | 19 | 1,911 | 877 | 100k+ | | | Exception output is not escaped |
| #13 | WF Cookie Consent | 100 | | 0 | 10k+ | | | No open findings |
| #14 | Show Me The Cookies | 100 | | 1 | 500 | | | Non-prefixed class |
| #15 | EU Withdrawal Compliance | 100 | | 0 | 1k+ | | | No open findings |
| #16 | Lightweight Cookie Notice – Cookie Banner for Cookie Consent | 84 | 8 | 18 | 5k+ | | | Database parameter is not escaped |
| #17 | CookieFirst | GDPR Cookie Consent Banner | 98 | 5 | 0 | 400 | | | Missing direct file access protection |
| #18 | Cookie Notify | 42 | 15 | 54 | 400 | | | Input is not validated |
| #19 | Awesome GDPR Compliant Cookie Consent and Notice | 36 | 653 | 201 | 500 | | | Text Domain Mismatch |
| #20 | Easy GDPR Consent Forms – MailChimp | 57 | 72 | 22 | 500 | | | Text Domain Mismatch |
| #21 | Cookie Dough Compliance and Consent for GDPR | 31 | 539 | 452 | 500 | | | Non Singular String Literal Domain |
| #22 | OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. | 31 | 213 | 62 | 300k+ | | | Output is not escaped |
| #23 | Surbma | GDPR Proof Cookie Consent & Notice Bar | 24 | 825 | 1,309 | 500 | | | Non-prefixed global variable |
| #24 | Mentions Legales Par Webdeclic | 61 | 82 | 39 | 500 | | | Non Singular String Literal Domain |
| #25 | clickskeks.at Cookiebanner | 41 | 21 | 18 | 500 | | | Unsafe printing function |
| #26 | Avacy CMP | 46 | 7 | 90 | 500 | | | Non-prefixed global variable |
| #27 | TRUENDO | GDPR Compliant Cookie Manager | 38 | 98 | 38 | 600 | | | Output is not escaped |
| #28 | Usercentrics Privacy Policy Generator | 99 | 1 | 0 | 700 | | | outdated tested upto header |
| #29 | Wider Gravity Forms Stop Entries | 87 | 22 | 0 | 600 | | | Text Domain Mismatch |
| #30 | AdSimple Cookie Consent Banner | 65 | 55 | 109 | 600 | | | wp function not compatible with requires wp |
| #31 | Madquick WP Legal Pages – One Click, 100% Free | 85 | 5 | 55 | 600 | | | Non-prefixed global variable |
| #32 | Lawwwing | Textos legales web y Banner de cookies | 90 | 31 | 13 | 700 | | | Text Domain Mismatch |
| #33 | GetTerms Cookie Consent & Policies | 98 | | 46 | 800 | | | Non-prefixed global variable |
| #34 | Terms & Conditions Per Product | 27 | 533 | 1,336 | 800 | | | Non-prefixed global variable |
| #35 | Hardcore Google Fonts Localizer | 25 | 331 | 261 | 800 | | | Text Domain Mismatch |
| #36 | Snitch | 87 | 5 | 19 | 900 | | | Nonce verification recommended |
| #37 | Elmo | 91 | 6 | 2 | 900 | | | Missing direct file access protection |
| #38 | USERCENTRICS CMP | 56 | 44 | 11 | 1k+ | | | Non Singular String Literal Domain |
| #39 | Double Opt-In for Contact Form 7 & Avada – Secure, GDPR-Compliant Email Verification | 23 | 675 | 643 | 1k+ | | | Unsafe printing function |
| #40 | Seers AI | Cookie Consent Banner – GDPR & CCPA Compliant Consent Management Platform | 25 | 1,446 | 421 | 1k+ | | | Output is not escaped |
| #41 | DSGVO Youtube | 41 | 48 | 29 | 1k+ | | | Unsafe printing function |
| #42 | etracker analytics | 59 | 16 | 9 | 1k+ | | | Exception output is not escaped |
| #43 | SV Tracking Manager | 27 | 968 | 129 | 1k+ | | | Output is not escaped |
| #44 | GDPRess | Eliminate external requests to increase GDPR compliance | 39 | 60 | 26 | 1k+ | | | Output is not escaped |
| #45 | EasyFonts – Host Google Fonts Locally, Fast & Auto-Optimize, GDPR Compliant | 47 | 5 | 58 | 1k+ | | | Interpolated SQL is not prepared |
| #46 | Cookie Notice & Consent | 41 | 101 | 29 | 1k+ | | | Output is not escaped |
| #47 | WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) | 99 | | 6 | 100k+ | | | trademarked term |
| #48 | Compliance by Hu-manity.co | 31 | 153 | 335 | 900k+ | | | Missing nonce verification |
| #49 | Warder Cookie Consent | 97 | | 2 | 0 | | | Input is not sanitized |
| #50 | Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode | 49 | 148 | 176 | 100k+ | | | Non-prefixed global variable |
