shouldiuse.io

Categories

VERDICT

WPConsent Review

Worth it

Should I use WPConsent?

Cookie banner & cookie consent plugin for WordPress - wpconsent.com

· 1 month ago

Buy it if you run a WordPress site and need GDPR/CCPA cookie consent with a free starting point. Skip it if you're not on WordPress or need enterprise multi-domain consent management.

Confidence

Medium. Based on ~22 public sources; several glowing reviews sit on sites affiliated with the vendor's network, so independent signal is thinner than it looks.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityNo direct support evidence in sources
  • Security posture

Pricing

$0

Free

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Elite$299.50/year

Best for

  • WordPress sites needing GDPR/CCPA banners
  • Non-technical owners wanting automatic cookie scanning
  • Sites needing self-hosted consent audit logs
  • Google Analytics/Consent Mode v2 users

Not for

  • Anyone not on WordPress — it's WordPress-only
  • Enterprises needing platform-agnostic, multi-domain CMPs
  • SaaS or web apps needing consent management outside WordPress
  • Teams wanting fully hosted consent storage off their own server

Gotchas - check before you buy

high

CVE-2025-12136 SSRF flaw disclosed in 2025 — confirm you're on a patched version.

medium

Elite runs $299.50/year across 4 paid tiers — match tier to your site count before buying.

medium

Reddit reports of blank Google Analytics after activation; test tracking immediately post-setup.

medium

Rave reviews cluster on vendor-affiliated sites; lean on Reddit and for independent signal.

Pros and cons

Pros

  • Free tier covers the core cookie banner
  • Scans the site; blocks cookies before consent for GDPR
  • Self-hosted consent logs with IP anonymization for audits
  • Supports Google Consent Mode v2
  • 100% no-questions money-back guarantee

Cons

  • WordPress-only; useless on any other platform
  • SSRF vulnerability (CVE-2025-12136) publicly disclosed
  • Reddit users report blank Google Analytics pages after setup

Sources & method

- 12 sources - One SSRF vulnerability (CVE-2025-12136) publicly disclosed in 2025; plugin offers self-hosted data storage and a dedicated security page.

official x2review x8security x2
  • SSRF vulnerability CVE-2025-12136, A server-side request forgery flaw was disclosed alongside the 40,000-install announcement; verify you run a patched release.

Key stats

  • Value for money: 4/5

    Rating

  • $0

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 4/5. Free tier; reviewers call paid plans cost-effective
  • Ease of use: 4/5. Repeatedly described as easiest WordPress consent setup
  • Feature depth: 4/5. Scanning, consent logs, self-hosting, Consent Mode v2
  • Support quality. No direct support evidence in sources
  • Security posture: 3/5. SSRF CVE disclosed; self-hosting and anonymization offset
  • Yes Free tier Core plugin free on WordPress.org
  • $299.50/yr Top tier price Elite plan, per WPBeginner review
  • 40,000+ Installs Per vendor announcement, 2025
  • 4 tiers Paid plans Plus a free tier

Pricing

Free

$0

  • Customizable cookie banner
  • Basic consent management
  • Listed on WordPress.org

Elite

$299.50/year

  • Top of 4 paid tiers
  • Full feature set per reviews

Security

One SSRF vulnerability (CVE-2025-12136) publicly disclosed in 2025; plugin offers self-hosted data storage and a dedicated security page.

  • SSRF vulnerability CVE-2025-12136A server-side request forgery flaw was disclosed alongside the 40,000-install announcement; verify you run a patched release.⁹

What users say

Reddit users report it generally works, with occasional issues like blank Google Analytics pages, while published reviews — many on vendor-affiliated sites — are uniformly positive.

“I like the fact that WPConsent is light”
IsItWP review
“A cookie plugin is no longer optional”
BlogVault review
“I've been using the WPConsent free version”
Reddit, r/Wordpress

Companies that use it

  • BettrData
Full analysis

Based on ~22 public sources; several glowing reviews sit on sites affiliated with the vendor's network, so independent signal is thinner than it looks.

Easy, affordable WordPress consent plugin with a free tier; WordPress-only, and verify you're past the 2025 SSRF flaw.

Methodology

Based on ~22 public sources; several glowing reviews sit on sites affiliated with the vendor's network, so independent signal is thinner than it looks.

Read how a report is made.

Sources

  1. WPConsent – WordPress.org plugin listingwordpress.org
    official
  2. WPConsent Pricingwpconsent.com
    official
  3. WPBeginner WPConsent reviewwpbeginner.com
    review
  4. BlogVault WPConsent reviewblogvault.net
    review
  5. IsItWP WPConsent reviewisitwp.com
    review
  6. Easy Digital Downloads WPConsent revieweasydigitaldownloads.com
    review
  7. Reddit: experience with WPConsentreddit.com
    review
  8. Reddit: WPConsent and blank Google Analyticsreddit.com
    review
  9. LinkedIn: 40,000 installs and SSRF CVE-2025-12136linkedin.com
    security
  10. WPConsent product security pagewpconsent.com
    security
  11. ConsentStack: CookieYes alternativesconsentstack.io
    review
  12. Pantheon: Managing GDPR compliance on WordPresspantheon.io
    review

Add this review to your site

WPConsent earned a Worth it check.

Put the badge on your site, pricing page, or docs.

Visitors see an independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Worth it WPConsent Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.