--------------------------- Title: Best WordPress Cookie Consent Plugins in 2026 (Ranked and Compared) URL: https://www.cookiebot.com/us/wordpress-cookie-plugin/ --------------------------- # Best WordPress Cookie Consent Plugins in 2026 (Ranked and Compared) A ranked, criteria-based comparison of ten WordPress cookie consent plugins for 2026. Covering CCPA and state privacy law support, free-tier depth, prior blocking, and Google Consent Mode v2. ## At a Glance - Cookiebot by Usercentrics and CookieYes lead this list, pairing free-tier access with automatic blocking and strong CCPA and state-law coverage. - A cookie banner alone does not meet privacy compliance requirements. The plugin also needs to block scripts before consent, not just after. - Complianz has the most generous free tier here, with no monthly pageview cap. - TCF v2.3 and Google Consent Mode v2 mostly matter if you also serve visitors in the EU or UK. Seven of the ten plugins we tested support TCF v2.3, but only as a paid feature. - Caching plugins like WP Rocket and LiteSpeed Cache can break cookie banners unless you exclude the banner's scripts. If you run a WordPress site with visitors in the US, you're dealing with more than California's rules alone. Colorado, Virginia, Connecticut, Utah, Texas, and several other states have all passed their own privacy laws. A basic cookie banner won't cover what most of them require. Our top pick for 2026 is Cookiebot by Usercentrics, for site owners who want a certified, mostly automated setup. CookieYes is the strongest runner-up if you manage several sites on different platforms and want one dashboard. Both plugins scan your site and block scripts before a visitor consents, which is the part a basic banner skips. The right choice still depends on your budget and your traffic. It also depends on whether you serve visitors in the EU or UK. That's where [Google Consent Mode v2 ](/en/cookiebot-cmp-google-consent-mode/)and [Transparency and Consent Framework (TCF) v2.3](/en/tcf/) matter most. The rest of this guide ranks ten plugins against the same criteria. We start with what matters most for a US-based site, so you can match a plugin without guessing. ## What Does a WordPress Cookie Consent Plugin Actually Do? A cookie consent plugin for WordPress does three jobs at once. It scans your site for cookies and third-party scripts. Then it shows visitors a banner where they can accept or decline categories. It also blocks the scripts in those categories until a visitor gives their consent. That third part, generally called prior blocking, is what separates a real consent tool from a cosmetic notice. Many older or simpler plugins only handle the banner and skip the blocking. That leaves the underlying privacy compliance gap unaddressed, even though the site looks compliant. Most US site owners think first of the [California Consumer Privacy Act (CCPA)](/en/what-is-ccpa/). But Colorado, Connecticut, Delaware, Iowa, Utah, Virginia, Florida, Texas, Montana, and Nebraska all have their own privacy laws now too. More states are adding them each year. If your site also has visitors outside the US, the EU's General Data Protection Regulation (GDPR) may apply as well. Understanding how WordPress itself uses cookies matters too, before you add a consent layer on top. ## How We Ranked These Plugins We compared all ten plugins against the same seven criteria. We used each vendor's current WordPress.org listing, documentation, and pricing page as of August 2026. Free tier availability came first, since most WordPress site owners start there. From there, we weighed CCPA and broader state privacy law coverage. We also checked whether blocking happens automatically or needs manual setup, along with ease of setup and support quality. Google Consent Mode v2 and TCF v2.3 came last in our weighting. Both matter mainly if you also serve visitors in the EU or UK. We treated them as a bonus rather than a must-have for a US-only site. Finally, we checked whether each plugin runs natively inside WordPress or depends on an external cloud dashboard. That affects both setup time and where visitor consent data lives. ## The 10 Best WordPress Cookie Consent Plugins in 2026 Each entry below covers free tier availability, US privacy law support, and whether blocking is automatic. We also note approximate pricing, company background, and our take. At a glance, here is how all ten compare on the criteria above: **Plugin****Free Plan Limits****Auto Blocking (Free)****CCPA / State Laws****Google Consent Mode v2 (Free)****TCF v2.3**Cookiebot by Usercentrics1 domain, up to 50 subpagesYesYesYesPaid tierCookieYes5,000 pageviews/mo, 1 siteYesYesYesPaid onlyComplianzNo pageview capYesYesPaid onlyPaid onlyReal Cookie BannerCore GDPR/ePrivacy captureYesYesPRO onlyPRO onlyIubenda1,000 pageviews/moYesYes YesPaid onlyTermly1 policy + banner, 10,000 views/moYesYesYesPro+ onlyMoove GDPR Cookie Compliance300,000+ sites use free versionNo (manual script list only)Yes Not mentionedNot mentionedCookie Compliance for WordPressBanner-only, or free account for blockingYesYesListed as available, but needs Pro to send the "Granted" signalNot available at any tierOsanoOpen-source banner, free to useNo (manual wiring needed)YesNot mentionedNot mentionedWPLP Cookie ConsentUnlimited sites, no traffic capsYesYesYesPremium only "Paid only" and "PRO only" mean the free version does not include that feature. "Manual only" means the plugin only blocks scripts you list by hand, not automatically. ### [1. Cookiebot by Usercentrics](https://wordpress.org/plugins/cookiebot/) Cookiebot was founded in Denmark in 2012 by Cybot and built one of the earliest plug-and-play cookie scanners in Europe. Cybot merged with Usercentrics in 2021, and the product now operates as Cookiebot by Usercentrics. Free plan: one domain, up to 50 subpages. It includes automatic scanning and blocking on the free tier already. CCPA support is included, and GDPR and TCF v2.3 are also supported, with TCF included from the entry paid tier. Google Consent Mode v2 is standard throughout. Paid Premium tiers scale by subpage count per domain, starting under 10 USD a month. Our take: the most hands-off setup on this list. Connect a domain group ID from the WordPress plugin, and scanning, banner, and blocking start working right away. ### [2. CookieYes](https://www.cookieyes.com/wordpress-cookie-plugin/) CookieYes started in 2018 as a WordPress plugin. It has since grown into a standalone, Google-certified consent management platform used across more than 1.5 million websites. The company also offers a web app and a Shopify app, so one account can cover WordPress alongside other platforms. Free plan: up to 5,000 pageviews a month on one site. That includes the banner, scanner, both policy generators, CCPA support, and Google Consent Mode v2. TCF v2.3 is a paid feature, and the plugin has over one million active WordPress installs. Our take: the broadest install base here means the widest theme and plugin compatibility testing. It is a strong pick for agencies managing WordPress, Shopify, and Squarespace sites from one dashboard. ### [3. Complianz](https://wordpress.org/plugins/complianz-gdpr/) Really Simple Plugins joined the team.blue group in 2023, then the iubenda Group specifically in 2024. That's the same group that owns Iubenda (entry 5 above). These two options on this list aren't fully independent of each other. Free plan: no monthly pageview cap. It includes functional, statistics, and marketing cookie categories, plus automatic blocking. The banner will not appear until you finish a short setup wizard. Google Consent Mode v2 and TCF v2.3 both sit on a paid plan. Our take: the most generous free tier we found. The mandatory wizard does make setup slower than CookieYes or a one-click install. ### [4. Real Cookie Banner](https://wordpress.org/plugins/real-cookie-banner/) Real Cookie Banner is built by devowl.io GmbH, a software company based in Bavaria, Germany. The plugin launched in 2020 and focuses specifically on the WordPress ecosystem rather than a broader multi-platform compliance suite. Free version: core GDPR and ePrivacy Directive consent capture with automatic blocking included. The ePrivacy Directive is an EU rule most US-only sites won't need to worry about directly. The same blocking covers CCPA needs too. All consent data stays on your own server rather than a vendor's cloud. TCF v2.3 and Google Consent Mode v2 require the PRO version, starting at about USD 67 a year for one site. Our take: a solid choice if keeping consent data on your own server matters to you. CCPA framing is thinner here than the US-first options on this list. ### [5. Iubenda](https://wordpress.org/plugins/iubenda-cookie-law-solution/) Iubenda was founded in Milan, Italy, in 2011. It started as a privacy policy generator before expanding into cookie consent and broader compliance tools. The company joined the team.blue group in 2022, the same group that owns Complianz (entry 3 above). Free plan: up to 1,000 pageviews a month, no card required. It runs an automated site scan and blocks scripts. Basic setup covers CCPA, the California Online Privacy Protection Act (CalOPPA), and GDPR out of the box. Google Consent Mode v2 is included even on the free plan; TCF v2.3 remains a paid-plan feature. Our take: useful if you want cookie consent bundled with privacy policy and terms generation in one plugin. The 1,000-pageview free cap is tight for an active site, though. ### [6. Termly](https://wordpress.org/plugins/uk-cookie-consent/) Termly was founded in 2017 in Spokane, Washington, by CEO David Reynier and co-founders. It started as a privacy policy generator. Since then, it has grown into a fuller compliance platform covering cookie consent, terms, and policy updates for small US businesses. Free plan: one legal policy plus a banner for up to 10,000 banner views a month. It includes automatic blocking, cookie scanning, CCPA and GDPR coverage, and Google Consent Mode v2. TCF v2.3 is available, but only on the paid Pro+ plan, not the free tier. Our take: a good fit if you need an attorney-drafted privacy policy too. It's also a US-founded option if that matters to you. It works well if you don't need TCF on a free budget, since that requires upgrading to Pro+. ### [7. Moove GDPR Cookie Compliance](https://wordpress.org/plugins/gdpr-cookie-compliance/) Moove Agency is a WordPress-focused agency based in London, founded in 2010. The GDPR Cookie Compliance plugin is one of several WordPress products the agency builds and supports directly. It sits alongside the agency's client services work. Free plan: available and used on over 300,000 sites. The catch is that it only blocks scripts you add to its settings by hand. It does not scan your site or block third-party scripts automatically. The plugin's own documentation states plainly that installing it does not make a website compliant. A premium add-on costs about USD 72 a year. Our take: only recommended if you are comfortable manually cataloguing every script on your site. The free version's default behavior is closer to a banner than a true blocker. ### [8. Cookie Compliance for WordPress](https://wordpress.org/plugins/cookie-notice/) This plugin was originally released as "Cookie Notice" by dFactory. It has since changed hands and been rebranded twice, first to "Compliance by Hu-manity.co," now to "Cookie Compliance for WordPress." It's currently owned and operated by Hu-manity.co rather than dFactory. Free plan: over 900,000 active installs. The plugin now works two ways. Used on its own with no account (Banner Only mode), it's just a customizable notice. There's no scanning, blocking, or compliance tooling. Sign in with a free Cookie Compliance account instead, and you unlock automatic script blocking, cookie categories, and consent records. Google Consent Mode v2 is listed as available on the free account too. A July 2026 user review reports it doesn't actually send the "Granted" signal to Google until you upgrade to Pro. There is no TCF support at any tier, free or paid. Our take: skip Banner Only mode, since it's cosmetic. A free Cookie Compliance account gets you real blocking, but budget for Pro if you run Google Ads. ### [9. Osano](https://docs.osano.com/en-US/osano/article/Mf6nfQG5-installing-osano-on-wordpress) Osano was founded in Austin, Texas, in 2018 by Arlo Gilbert and Scott Hertel. Cookie consent is one module of a broader privacy platform. It also covers data subject rights requests, data mapping, and vendor risk. The piece described here is the free, open-source Cookie Consent banner Osano maintains. Free plan: the open-source Cookie Consent banner has an official WordPress plugin wrapper, and it costs nothing to use. It is highly configurable but does not include site scanning or automatic script blocking out of the box. Osano's full consent management platform installs as a script tag rather than a native WordPress plugin. Our take: a US-founded option that works as a free banner for developers comfortable wiring up blocking rules manually. It is not a self-contained solution the way the WordPress-native options above are. ### [10. WPLP Cookie Consent](https://wordpress.org/plugins/gdpr-cookie-consent/) WPLP Cookie Consent is built by the team behind WP Legal Pages (wplegalpages.com), a WordPress-focused compliance vendor. It pairs with a companion plugin, WPLP Legal Pages, under what the company calls the WPLP Compliance Platform. Free plan: unlimited sites, no traffic caps or visitor-based pricing. It includes a built-in cookie scanner, automatic script blocking, category-based consent, and a preference center. Consent records stay in your own WordPress database rather than a vendor's cloud. CCPA and GDPR consent capture are covered on the free plan, and Google Consent Mode v2 is included as well. TCF v2.3 support and geo-targeted, region-specific banners require a premium plan. Our take: a good fit if you want a WordPress-native, self-hosted option in the same spirit as Real Cookie Banner. It skips the per-site pricing, too. ## Which Plugin Should You Pick? If you want the fastest, most automated setup, Cookiebot by Usercentrics is the strongest match. Just expect pricing to scale per domain as your site grows. If you have a strict zero-dollar budget and can complete a short setup wizard, Complianz is a strong fit. It has the most free features here, with no pageview cap. If your site serves only US visitors and skips EU or UK ad targeting, you can skip TCF entirely. Focus on CCPA and state-law coverage instead. Most plugins on this list handle that well on their free or entry-level tier. If you do run programmatic ad campaigns targeting the EU or UK, you'll likely need TCF v2.3. Budget for a paid tier, since none of the ten plugins here offer it free. Cookiebot by Usercentrics bundles TCF starting from its lowest paid plan. ## How to Install a Cookie Consent Plugin on WordPress Installing a [cookie consent plugin](/en/cookie-consent-plugin-wordpress/) takes only a few minutes, but getting the setup right matters more. The four steps below cover the basics. For the full walkthrough with screenshots and common mistakes, see our companion guide: Cookie Consent Plugin for WordPress: How to Set It Up and Avoid Common Mistakes. 1. **Install the plugin.** From your WordPress dashboard, go to Plugins, then Add New, and search for your chosen plugin by name. 2. **Activate and connect your account.** Most plugins, including Cookiebot by Usercentrics, connect a cloud account to your site. You will need an API key or group ID from your dashboard. 3. **Run the scan and configure your banner.** Let the plugin scan your site for existing cookies and scripts. Review the categories it finds before your banner goes live. 4. **Verify prior blocking.** Load your site in a private browser window and decline all cookies. Then check your browser's developer tools to confirm analytics and advertising scripts did not fire. ## What Are Common Mistakes to Avoid? The most frequent mistake is treating the banner as the whole job. A banner that displays without blocking anything is a cosmetic notice, not a privacy compliance tool. The second is skipping prior blocking entirely. That's the failure mode behind Moove's manual-only free tier and Banner Only mode on Cookie Compliance for WordPress above. Some plugins only block scripts you list by hand. Others don't unlock blocking at all unless you sign in. Either way, any forgotten script keeps loading regardless of a visitor's choice. The third is a caching conflict. Caching plugins like WP Rocket and LiteSpeed Cache commonly minify or delay JavaScript and CSS. Your consent plugin depends on those exact files. When a caching plugin changes them, the banner can disappear or stop saving choices. Most consent plugins publish a list of files to exclude from caching and minification. Add those exclusions before assuming your setup is broken. A free privacy compliance scan is also a fast way to check what your site is actually doing today. ## How Do You Choose the Right Plugin for Your Site? The right WordPress cookie consent plugin depends on your traffic, your budget, and which US states your visitors are in. Cookiebot by Usercentrics and CookieYes cover the widest range of sites with the least manual setup. Complianz suits a zero-budget site willing to complete a short wizard. TCF v2.3 and Google Consent Mode v2 only matter if you also serve visitors in the EU or UK. Most US-only sites can treat them as optional. Whichever plugin you choose, confirm that it blocks scripts before consent, not just after. That is what separates real privacy compliance support from a cosmetic banner. ## Connect Cookiebot by Usercentrics to your WordPress site Get automatic scanning, blocking, and CCPA-ready consent running in minutes. [START FREE](https://admin.cookiebot.com/signup?utm_source=blog&utm_medium=content-distribution&utm_campaign=blog-organic) *This article is provided for informational purposes only and does not constitute legal advice. We recommend consulting with a qualified legal professional for advice specific to your situation.* ## Preamble A ranked, criteria-based comparison of ten WordPress cookie consent plugins for 2026. Covering CCPA and state privacy law support, free-tier depth, prior blocking, and Google Consent Mode v2. ## Summary A ranked, criteria-based comparison of ten WordPress cookie consent plugins for 2026. Covering CCPA and state privacy law support, free-tier depth, prior blocking, and Google Consent Mode v2. --- ## Footer ### Products - [Cookiebot™ Consent Solution](https://www.cookiebot.com/us/cookie-consent-solution/) - [Audience Survey](https://www.cookiebot.com/us/audience-survey-add-on/) - [Usercentrics for Wix](https://www.cookiebot.com/us/cookiebot-for-wix-by-usercentrics-app/) - [Usercentrics Cookiebot WordPress Plugin](https://www.cookiebot.com/us/new-wp-cookie-plugin/) - [Cookiebot CMP for Shopify](https://www.cookiebot.com/us/cookiebot-cmp-for-shopify/) - [Cookie checker](https://www.cookiebot.com/us/cookie-checker/) - [Usercentrics products](https://usercentrics.com/us/) - [Pricing](https://www.cookiebot.com/us/pricing/) ### Regulations - [DMA (EU)](https://www.cookiebot.com/us/digital-markets-act-dma/) - [GDPR (EU)](https://www.cookiebot.com/us/gdpr/) - [CCPA (California)](https://www.cookiebot.com/us/what-is-ccpa/) - [VCDPA (Virginia)](https://www.cookiebot.com/us/virginia-vcdpa/) - [LGPD (Brazil)](https://www.cookiebot.com/us/lgpd/) - [TCF v2.3 (IAB)](https://www.cookiebot.com/us/tcf/) - [Google Consent Mode (EU)](https://www.cookiebot.com/us/cookiebot-cmp-google-consent-mode/) - [Microsoft UET Consent Mode](https://www.cookiebot.com/us/microsoft-consent-mode-cmp/) - [View all regulations](/us/regulations-and-frameworks/#united-states-state&united-states-federal) ### Partners - [Become an affiliate](https://www.cookiebot.com/us/affiliates/) - [Affiliate Login](https://app.impact.com/login.user) - [Become a partner](https://www.cookiebot.com/us/resellers/) - [Find a partner](https://www.cookiebot.com/us/cookiebot-reseller/) ### Resources - [Blog](https://www.cookiebot.com/us/blog/) - [Customer stories](https://www.cookiebot.com/us/customer-stories/) - [Customer directory](https://www.cookiebot.com/us/cookiebot-customer-directory/) - [Digital Markets Act Hub](https://www.cookiebot.com/us/digital-markets-act-dma-resources/) - [Google Consent Mode Hub](https://www.cookiebot.com/us/google-consent-mode-resources/) - [Google Consent Mode V2 certification](https://courses.usercentrics.com/course/google-consent-mode-v2) - [Google Consent Audit Fixes](https://www.cookiebot.com/us/google-consent-audit-fixes/) - [Cookie Banner Cost Calculator](https://www.cookiebot.com/us/cookie-banner-pricing-calculator/) ### Company - [About us](https://www.cookiebot.com/us/about/) - [Careers](https://usercentrics.com/career/) - [Support](https://support.cookiebot.com/hc/en-us/) - [Developer documentation](https://www.cookiebot.com/us/developer/) ©2026 Cookiebot. All rights reserved. Cookiebot is a trademark of Usercentrics A/S. Usercentrics A/S is registered in Denmark. Company reg. no.: 34624607. Do Not Sell or Share My Personal InformationData Subject RequestsManage Your Preferences [Privacy Policy](https://www.cookiebot.com/us/privacy-policy/) · [Terms of Service](/en/terms-of-service/) · [Cookie Declaration](https://www.cookiebot.com/us/cookie-declaration/) · [Data Processing Agreement](/us/data-processing-agreement/) · [Legal Notice](https://www.cookiebot.com/us/legal-notice/) · [Accessibility Statement](/en/accessibility-statement-wcag-compliance/)