Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode

WordPress plugin · cookiebot · WordPress.org ↗

Latest v4.7.3 Last release Sep 14, 2026 Tested up to WP 7.0.5 100,000+ active installs

Critical

High

Known total

Unfixed

Running Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
MEDIUM CVSS 4.3	Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode [cookiebot] < 4.6.5 WPVulnerability	< 4.6.5	v4.6.5	CVE-2026-25407	Jan 29, 2026
MEDIUM CVSS 4.3	Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode [cookiebot] < 4.5.9 WPVulnerability	< 4.5.9	v4.5.9	CVE-2025-53197	Jun 27, 2025
MEDIUM CVSS 4.3	Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode [cookiebot] < 4.4.2 WPVulnerability	< 4.4.2	v4.4.2	CVE-2025-1666	Mar 5, 2025
UNKNOWN	Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode [cookiebot] < 3.6.1 WPVulnerability	< 3.6.1	v3.6.1	—	Sep 9, 2020
UNKNOWN	Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode [cookiebot] < 3.6.1 WPVulnerability	< 3.6.1	v3.6.1	—	Sep 8, 2020
UNKNOWN	Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode [cookiebot] < 3.6.1 WPVulnerability	< 3.6.1	v3.6.1	—	—
UNKNOWN	Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode [cookiebot] < 3.6.1 WPVulnerability	< 3.6.1	v3.6.1	—	—

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.