by iubenda 4.7 (396 reviews)

iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more

Name: iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more
Rating: 4.7 (396 reviews)
Author: iubenda

The solution for GDPR compliance + more. Get your cookie banner, privacy policy, terms and conditions and handle cookie consent in just one plugin.

iubenda ranks #248 among WordPress.org plugins with 200,000+ active installations, is #38 of 4,482 in the Security category, a 4.7/5 rating from 396 reviews, and was last updated Sep 1, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1

v3.13.5 Current Version v3.13.5

Updated 2 weeks ago Last Update on 01 Sep, 2026

Refreshed 9 hours ago Last Refreshed on

#38 of 4,482 in Security Top 1% by installs Downloads -83.9% this week Actively maintained

View on WordPress.org

Rank

#248

— No change

Active Installs

200K+

-19%

KW Avg Position

15.4

— No change

Downloads

5.3M

+1,975 today

Support Resolved

— No change

Rating

94%

Review 4.7 out of 5

4.7 (396 reviews)

Next Milestone 300K

Total Progress 46.8%

200K+ 300K+

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 53,165 more installs to reach 300K+

Rank Changes

Current #248

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.7

396 reviews

Overall 94%

361 (91%)

9 (2%)

5 (1%)

2 (1%)

19 (5%)

Support Threads Overview

Resolved

Unresolved

Total Threads

Resolved

Unresolved

Resolution Rate

Security History

Source: WPVulnerability

7 known vulnerabilities on record · 2 in the last 24 months · checked 1 week ago

Sep 4, 2026

iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more [iubenda-cookie-law-solution] < 3.13.5

CVE-2026-77233 · Fixed in v3.13.5
Sep 4, 2026

iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more [iubenda-cookie-law-solution] < 3.13.5

CVE-2026-77263 · Fixed in v3.13.5
Dec 12, 2022

iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more [iubenda-cookie-law-solution] < 3.3.3

CVE-2022-3911 · Fixed in v3.3.3
Dec 6, 2022

iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more [iubenda-cookie-law-solution] < 3.3.3

Fixed in v3.3.3
Jun 17, 2022

iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more [iubenda-cookie-law-solution] < 3.0.8

Fixed in v3.0.8
May 12, 2020

iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more [iubenda-cookie-law-solution] < 2.3.5

CVE-2020-12742 · Fixed in v2.3.5
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more [iubenda-cookie-law-solution] < 3.5.8

Fixed in v3.5.8

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 3.13.5
Last Updated: Sep 01, 2026
Requires WP: 5.0+
Tested Up To: 7.1
PHP Version: 7.0.0 or higher
Author: iubenda

Support & Rating

Rating: ★ ★ ★ ★ ★ 4.7
Reviews: 396
Support Threads: 1
Resolved: 0%

Keywords

CCPA GDPR Privacy Policy cookie banner terms and conditions

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,752

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

Akismet Anti-spam: Spam Protection

5M+ installs

Wordfence Security - Firewall, Malware Scan, and Login Security

5M+ installs

#11

Really Simple Security - Simple and Performant Security (formerly Really Simple SSL)

Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention

View all Security-and-spam-protection plugins

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners who need to comply with privacy laws like GDPR, CCPA, and similar regulations across regions. It provides a cookie banner with consent management, privacy/cookie policy generation, consent record storage, and terms and conditions documents in a single plugin.

Cookie banner and consent management
CCPA notice with DNSMPI link
IAB TCF integration
Privacy and cookie policy generator
Auto-detects user location
Consent database for webforms
Terms and Conditions generator
Google Consent Mode support

Frequently Asked Questions

Common questions about iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more

Our extensive documentation makes it easy for you to learn all you need to know about compliance and how to use iubenda’s products on your site or app. You can access it here. You can also visit our support forum here.

A good rule of thumb is to always comply with the laws of the region where you are based as well as the region or country in which the users you target are based. 📌 However, for an even easier, more specific way to tell which laws apply to you, you can simply take this 1-minute quiz.

If you’re based in the European Union – including the UK – or target EU users, and your website uses cookies or trackers (which it most likely does), then, yes, you do need a cookie notice.

A privacy policy is a legal requirement almost everywhere in the world. You need it because under most countries’ laws, you’re legally required to inform your users about the data you’re collecting and how you’re processing them. Find out what should be in a privacy policy here.

While Terms and conditions aren’t always legally mandatory, they’re always recommended. They help you protect you and your business from legal liabilities.

GDPR stands for General Data Protection Regulation (Regulation (EU) 2016/679). The GDPR specifies how personal data should be lawfully processed (including how it’s collected, used, protected or interacted with in general). While it was still an EU member state, the UK was very instrumental in the creation of the GDPR and therefore, Post-Brexit, has adopted the UK-GDPR – which currently is essentially the same as the European GDPR. DSGVO & RGPD are, respectively, the German and Spanish translations of the English acronym of the General Data Protection Regulation (GDPR). Learn more about the GDPR here.

In effect since 2002, the ePrivacy Directive (Cookie Law) was created to put guidelines in place for electronic privacy, including email marketing and cookie usage. Under the Cookie law, organizations that target users from the EU must inform users about data collection activities and give them the option to choose whether it’s allowed or not. This means that if your site/app (or any third-party service used by your site/app) uses cookies or similar technologies, you must first obtain valid consent prior to the installation of those cookies, except where they fall into the exempt category. In practice, you’ll need to: show a cookie banner at the user’s first visit; implement a cookie policy that contains all required information; allow the user to provide or refuse consent; block cookie/ tracker scripts from running until consent is provided. You can learn more about how the ePrivacy and GDPR interact in regards to cookies and trackers here.

The Privacy and Electronic Communications Regulations 2003 (PECR) is the UK's implementation of the EU's ePrivacy directive and set's out rules for electronic privacy

California’s most well known Privacy Laws are some of the most robust in the United States. They are both relevant to you if you likely have users that are based in the state of California. California Online Privacy Protection Act (CalOPPA) - since 2002 Law requires commercial websites and services to have a privacy policy. The document: Must clearly state what info is collected and who it's shared with. Must disclose how a business’s website or online service responds to Do Not Track signals from Web browsers. Must include the effective date of the Privacy Policy and more. California Consumer Protection Act (CCPA) Grants users additional rights such as the right to be informed and the right to access information you’ve collected about them - but perhaps, most relevant to marketing is the right to Opt-out. Under the CCPA, users have the right to opt-out of any processing that can be considered a sale of their data. Sale, in this context, is quite broad and simply means sharing for any profit- monetary or otherwise. *Note that in the case of minors, they are granted the right to Opt-in. *More about the CCPA here.

The Brazilian General Data Protection Law, the Lei Geral de Proteção de Dados Pessoais, (LGPD) can be considered as Brazil’s answer to the GDPR – with the Brazilian law aligning with the EU Regulation in many ways, while differing in others. You can learn more about it here.