Complianz – GDPR/CCPA Cookie Consent

Changelog

7.5.0

• June 17th, 2026
• Feature: New Website Scan column in the post overview showing the scan status of each post.
• Enhancement: Notices when webshop pages, custom post types or a high post volume require the advanced Website Scan.
• Enhancement: The cookie scan focuses on posts and pages for faster, more relevant results.
• Enhancement: Website Scan errors are now visible in the plugin log.
• Enhancement: Daily background website scan and cookie change check run via WP-Cron without requiring an admin session.
• Enhancement: Added wpml-config.xml to improve WPML compatibility for plugin strings.
• Enhancement: Daily cleanup of expired transients and obsolete placeholder images.
• Accessibility: Improved screen reader support for cookie banner and manage consent button.
• Accessibility: Fixed cookie banner reflow at high zoom levels (400%+).
• Accessibility: Fixed interactive consent category controls in cookie banner and cookie policy.
• Fix: Scan progress could keep polling indefinitely when the scan found no cookies.
• Fix: Updated “Dismiss on Timeout” tooltip and GEO IP setup error message.
• Fix: Support web components in cookie blocker placeholder regex.
• Fix: Remove unnecessary jQuery dependency from DNSMPD script.
• Fix: Consent area block content not served when block is nested.

7.4.7

• June 1st, 2026
• Security: Fixed DOM-based Cross-Site Scripting (XSS) vulnerability.
• Security: Cookie scanner and Cookiedatabase sync now require WSC authentication. Unauthenticated installs see a locked state with onboarding prompt.
• Enhancement: Improved WSC onboarding modal — simplified dismiss logic, single-option state with automatic migration from legacy options.
• Enhancement: Added integration notice for FunnelKit.
• Enhancement: Updated default cookie banner color scheme to improve accessibility contrast.
• Accessibility: Fixed heading hierarchy in cookie policy page.
• Fix: Mixed languages on cookie policy page when syncing non-English cookies from Cookiedatabase.
• Fix: WSC credentials not cleared from database after reset.
• Fix: PHP 8.1 deprecation notices in cookie blocker and WSC authentication handler.

7.4.6

• April 13th, 2026
• Fix: Prevent PHP warnings when cookiedatabase.org returns a malformed or unexpected response during sync.
• Security: Fixed unauthorized access to post content via REST API endpoint.
• Enhancement: Updated Gutenberg blocks to API version 3.
• Fix: Resolved infinite page reload loop triggered by auto-dismiss on scroll or timeout.

7.4.5

• March 16th, 2026
• Feature: Added WCAG color contrast calculator to color picker.
• Feature: New plugin integration: Pinterest for WooCommerce.
• Add: Add Tennessee (TIPA), Minnesota (MCDPA), Maryland (MODPA), Indiana (ICDPA), Kentucky (KCDPA), Rhode Island (DTPPA) to the US Privacy Policy.
• Accessibility: Improved cookie banner keyboard navigation and focus trapping.
• Security: Fixed Stored Cross-Site Scripting vulnerability.
• Fix: Improved script detection for WP Google Maps Plugin.
• Fix: Record of consent table display and cookie banner array comparison.
• Fix: Conditionally hide script header option for integrations that handle tracking implementation.
• Fix: Processing agreement file upload validation and DOCX mime type.
• Fix: Website Scan onboarding modal not checking for new installations.
• Fix: Remote scan issues in non-standard WordPress setups.
• Fix: Added necessary classes to email and website labels in Cookie Policy.
• Fix: Added missing Website Scan options to uninstall routine.
• Fix: Website Scan email case sensitivity in authentication.
• Fix: Custom cookies and services now display all fields (retention, purpose, function, service type, privacy URL) in non-English languages.
• Fix: Support form description.
• Fix: Hide link section in blocked content when no cookie-statement is found.
• Fix: Old links and typos.

7.4.4.2

• December 16th, 2025
• New: Complianz logo.

7.4.4.1

• December 3rd, 2025
• Improvement: Tested up to WordPress 6.9.
• Fix: Updated integration with the WP Google Maps Plugin.

7.4.4

• November 18th, 2025
• Feature: Microsoft Clarity Consent Mode V2 integration.
• Fix: Old documentation links update.
• Fix: Website Scan cleanup causing fatal error when license class unavailable.
• Security update: Shortcode stored Cross-Site scripting.

7.4.3

• October 30th, 2025
• Enhancement: Added cmplz_prevent_get_shortcode_page_id filter to allow developers to prevent execution of get_shortcode_page_id.
• Enhancement: Optimized DNSMPD export for large datasets.
• Enhancement: Updated mPDF library for improved PHP compatibility (7.4 to 8.4)
• Improvement: Updated services: Vimeo, X (Formerly Twitter), Linkedin. Added Snapchat.
• Improvement: Added FunnelKit and updated Wp Google Maps integration.
• Accessibility: Improved link semantics and aria-labels for “Read more” and cookie banner links
• Fix: Correct typos and spelling errors.
• Fix: Google Analytics, fixed “empty additional tag” issue.

7.4.2

• July 11th, 2025
• Translations: Updated translations.
• Accessibility: Improved cookie banner for better accessibility.
• Fix: Backend not loading due to missing dependency on WordPress versions lower than 6.6.

7.4.1

• June 18th, 2025
• New: Notifications system.
• Update: Other plugins suggestion component.
• Improvement: Website Scan, added site creation.
• Improvement: Dailymotion integration.
• Improvement: Google Recaptcha integration.
• Improvement: Clarity integration.
• Security update: Authenticated (Translator+) Stored XSS.

7.4.0.1

• April 14th, 2025
• Improvement: Tested up to WordPress 6.8
• Fix: Fixed missing “Details Per Purposes” section.

7.4.0

• March 31th, 2025
• Improvement: refactored translations of Complianz due to Function _load_textdomain_just_in_time notice
• Improvement: updated translations
• Improvement: onboarding to authenticate website scan trigger changed

7.3.1

• March 5th, 2025
• Fix: removed admin redirect for cmplz_admin redirect solving issues with manageWP and forceful scan onboarding.
• Enhancement: Add support for New Jersey, Iowa, Delaware, New Hampshire, Nebraska state privacy laws.
• Enhancement: Email obfuscation now uses HTML entities and CSS to prevent spam bots from reading the email address.
• Enhancement: Google Tag Manager script placement can now be dynamically set to load in the header or footer based on user preference, addressing Google Diagnostics warnings.
• Enhancement:Small labels and descriptions adjustments.

7.3.0

• February 12th, 2025
• Enhancement: Website Scan, added services detection.
• Enhancement: Improved Omnisnippet compatibility.
• Enhancement: Removed “BETA” references on Google Consent Mode V2 to reflect its finalized status.
• Enhancement: Removed the soft cookie wall preview functionality and updated its description.
• Enhancement: Added new Tips & Tricks.
• Enhancement: Updated email field validation to allow the use of certain special characters.
• Fix: Resolved issues with vendor links by improving the parsing logic to handle commas in vendor names or URLs correctly.
• Fix: Triggered GeoIP database installation to ensure proper functionality during upgrades.

7.2.0

• December 16th, 2024
• Feature: Website Scan
• Enhancement: Introduced the cmplz_after_css_generation hook to improve CSS file management
• Enhancement: Language file updated
• Fix: translations https://complianz.io/doing-it-wrong-notice

7.1.5

• November 13th, 2024
• Fix: update bf dates

7.1.4

• October 28th, 2024
• Improvement: Add support for Montana, Oregon, and Texas state privacy laws enhancement.
• Improvement: Add support for Microsoft Ads UET consent mode.
• Fix: mPDF custom tempdir cache cleanup.
• Fix: Correct cmplz_transients handling in post save process.
• Fix: Ensure complete data removal on Complianz uninstall.
• Fix: Update email validation for longer TLDs.
• Fix: Label adjustment.

7.1.0

• May 14th, 2024
• Improvement: Updated Google Site Kit integration
• Improvement: Detection of pages with shortcode query improved for sites with a lot of pages
• Improvement: limit above query to pages only, props @georgestephanis
• Fix: get_required_pages not existing for documents rest_api endpoint, causing a fatal error
• Fix: Data is shared with this service not saving in cookies overview

7.0.5

• April 29th, 2024
• Fix: compatibility with Meta Slider plugin
• Fix: unexpected behaviour when editing a new, unsaved script block in the script center
• Fix: Detection of Really Simple SSL pro in other plugins section
• Fix: don’t replace style src with #, as this reloads the entire page as style src, props @smerriman
• Fix: prefill administrator email in onboarding email
• Fix: undefined array key placeholderContent in Block Editor block

7.0.4

• March 9th, 2024
• Fix: Purposes were incorrectly set to ‘disabled’, while there should only be a condition limiting it to the US region only, props @cdhodgdon
• Fix: Pixelyoursite + pinterest function name incorrect, props @theogk

7.0.3

• March 5th, 2024
• Improvement: clean up MPDF temp directory after pdf generation
• Improvement: set aria label on x close button from banner
• Fix: deleting cookies with disallowed cookie names causing fatal error, props @baffled
• Fix: missing cmplz_deny_all() function for expired cookies with a changed cookie policy id.
• Fix: cmplz_set_category_as_body_class() also iterating over objects instead of just class names, when parsing the body classes, props @tomnoir
• Fix: due to changed setting usage, Complianz assumed TCF active in some situations, causing the banner editor not to function properly, props @vania2008, @jeanfrancois7

7.0.2

• February 28th, 2024
• Fix: force the ‘wizard_completed_once’ to be true for upgrades to 7.0.2, to prevent issues with banner not showing after upgrade, props @cometto, @riroweb2022, @katynen, @julianulmer, @iviadvagency

7.0.1

• February 27th, 2024
• Fix: catch COMPLIANZ class not loaded yet in cmplz_get_option, props @sizilianischekueche, @franktomas, @martinellimarco, @boinich

7.0.0

• February 27th, 2024
• New: Rework codebase to React Framework
• New: Hybrid cookie scan
• New: Menu-item ‘Tools’
• New: Set cookies on root domain
• New: Search for plugins and services
• New: Statistics block on dashboard
• New: Onboarding
• New: consent mode
• New: Greenshift + YouTube integration
• Improvement: INP performance optimisation
• Improvement: catch not isset region
• Improvement: add banner title to css class
• Improvement: extend YoTuWP blocklist
• Improvement: whitelist video lightbox in Beaver Builder
• Improvement: allow text in Clarity ID input field
• Improvement: DNSMPI feedback on form
• Improvement: Dropped temp dir from MPDF generation, props @piccart
• Improvement: use custom transient to lower number of database requests
• Improvement: Added a filter to delete Records of Consent if older than X days
• Improvement: E-mail obfuscation now uses the antispambot() function
• Improvement: Consent area on a Twitter embed no longer links to Twitter
• Improvement: Improvement: Added translatable aria-label
• Fix: Elementor popup blocked content not unlocking on refresh
• Fix: per site activation of single site plugin on multisite
• Fix: include banner id in cache key for page links, to ensure different banner data is respected across banner ids.
• Fix: jQuery exists check in Elementor integration

6.5.6

• Improvement: prevent administrator from saving javascript in the css editor

6.5.5

• October 12th, 2023
• Fix: also clear localstorage & sessionstorage with cookie shredder
• Fix: With only Canada in opt out mode selected, the question ‘will you self host Google Fonts’ was not visible
• Improvement: setting a class on the parent div of a placeholder with height inherit resolves css issues on some themes, props @maxineblack
• Fix: compatibility with WP Rocket when some iframes are lazy loaded, but not all.

6.5.4

• September 20th, 2023
• Improvement: upgrade MPDF version to 8.1.3
• Improvement: prefix ‘request’ to prevent conflicts with weglot
• Fix: bug in Divi Recaptcha integration
• Fix: Block Editor dropping styles when in unsynced mode
• Fix: Consent Mode moved to banner_loaded hook to ensure loading

6.5.3

• 08-08-2023
• Improvement: Tested up-to WordPress 6.3

6.5.2

• 11-07-2023
• Fix: catch missing $slug when another plugin drops the slug property

6.5.1

• 10-07-2023
• Improvement: restore php 7.2 support in burst installer
• Improvement: catch server configurations not supporting webp
• Improvement: catch not existing file when generating webp
• Improvement: catch not existing $slug property in auto updates check
• Improvement: catch not existing ID in wordpress $post when checking for summary divs

6.5.0

• 04-07-2023
• New: placeholders converted to wepb, loaded with lazyloading, props @james-feaver, @asafm7
• Fix: CAOS host analytics locally integration fixed after constant was dropped
• Fix: DNT caused wp_has_consent to always return false, which should not be the case if consent is given on a service specifically
• Fix: no rt_ prefix on Tag Manager events
• Fix: PHP 8.2 warnings of dynamically created properties
• Fix: When TCF active, in some cases this could cause a cmlz_accept_all not defined error
• Fix: Fatal error in Wizard when using “Falang”, props @chabass
• Fix: cookies can not able to run in some cases due to missing variable declarations, props @sira1967

6.4.7

• June 14th, 2023
• Fix: WordPress 6.2 version moved the Privacy Policy function to a different file. Added fallback for older versions.
• Fix: The fix for the Classic Editor bug which removes summary/details html elements, caused an issue when the post content is empty.
• Improvement: if configuration by Complianz is set to false, the gtag id was added anyway, but empty.
• Improvement: strings in UK cookie policy translatable, which shouldn’t be the case.

6.4.6

• Improvement: unhide pagination on data requests page.
• Improvement: Jersey and Guernsey included
• Improvement: move nonce check to earlier in the process
• Improvement: only show notice about duplicate statistics implementation if stats are actually used.
• Improvement: Easy Liveblogs integration
• Fix: Workaround for strange issue where the Classic Tiny MCE editor strips the summary/details tags from the unsynced legal documents html

6.4.5

• Security: CSRF fixed
• Fix: type=module support for scripts other than inline scripts
• Fix: new shortcode handling for consent area not working for some plugin shortcodes, split in two options: default, the old one, optionally the clientside version.

6.4.4

• Fix: catch not existing post_data if post structure is not following WordPress standards
• Fix: exclude bricks builder from cookie blocker
• Improvement: AddToAny integration updated, props @micropat
• Improvement: wording and links in Canadian Cookie Policy
• Improvement: mailchimp woocommerce integration feature activation after consent
• Improvement: updated classic consent area to the same new structure as the new Gutenberg consent area
• Improvement: script type module support in cookie blocker
• Improvement: exclude cornerstone builder from cookieblocker
• Improvement: new cmplz_upload_dir and cmplz_upload_url filters, to allow overrides of the plugin folders.
• Dropped: Ultimate Add ons for Elementor integration, due to incompatibility issues

6.4.3

• Improvement: add exclude cookies filter
• Improvement: add support for parent/child themes, props @dominiccarrington
• Improvement: incorrect bold paragraphs in Privacy Statement for Children
• Improvement: clear blocked scripts cache on ajax save in script center
• Improvement: hubspot integration improved
• fix: cmplz-consent-area shortcode reload loop because of hardcoded marketing category, props @matthiaswagner

6.4.2.1

• New: branding update

6.4.2

• Security update: authenticated Stored XSS issue
• Fix: disable cookie banner option in wizard didn’t load the complianz.js scripts, causing placeholders not to work when activated.
• Fix: After switching to unlinked status in a legal document, purpose paragraph got dropped
• Fix: not all categories within services showing in cookie policy overview
• Fix: isset check on get_field_type function, props @moxymore
• Fix: not translatable VAT ID string
• Fix: With Global Privacy Control or Do Not Track enabled, and the user accepting an embedded service, the service was blocked again after a pageload.
• Improvement: allow custom directory for cookie banner css generation
• Improvement: catch open basedir restriction
• Improvement: catch not existing accept button during initial cookie scan (no banner active yet)
• Improvement: function cmplz_has_consent() in ‘other’ region returned false when no cookies present, while it should return true in that case.
• New: Buttonizer integration
• New: hCatpcha for WordPress

6.4.1

• Improvement: do not copy over async attribute to prevent issues re-initializing scripts in some setups
• Improvement: get_cookie() function performance, props @lucastello
• Improvement: add space behind contact details on policy
• Improvement: add our own ‘manage_privacy’ capability, as the wordpress core manage_privacy_options is not implemented consistently with other capabilities
• Improvement: catch not set array class-document.php 1820
• Improvement: hide blocked iframes until they’re consented to, for better UX
• Improvement: PHP 8.2 compatibility
• Improvement: export datarequests on symlinked folder setups (BASE_PATH -> ABSPATH)
• Fix: links to processing agreement create page broken
• Fix: Divi Recaptcha support
• Fix: WP Go Maps Pro update
• Fix: cosmetic change: cmplz_functional should always be allow, props @jidwictut9
• Fix: when editing consent in unsynced mode in Gutenberg, content went missing because of automatically wrapping with divs by gutenberg and missing key props
• New: Agile Store Locator integration
• New: Omnisend Connect integration

6.4.0

• Fix: function name error in microsoft ads integrations, props @mustafauysal
• Fix: GPC & DNT in opt out regions not respected, props @ahegyes
• Improvement: conditional scroll into view on consent area shortcode, props @falkemediawy
• Improvement: MPDF update, props @sviluppomania
• Improvement: catch CURL errors because of local SSL issues, add to system status
• Improvement: return # for not existing page id in case of generated docs by complianz, but not actually generated
• Improvement: Fire load event in divi integration after consent

6.3.9

• Brought version in sync with premium version
• Improvement: Add classes to address details
• Improvement: auto installer for Really Simple SSL multisite compatible
• Improvement: add filter to allow filtering data-request email recipient ‘cmplz_datarequest_email’
• Improvement: translatable URLs in polylang
• New: Microsoft Ads/Microsoft Clarity integration
• Fix: some scripts not executing properly because of copying data-service & data-category attributes props @sophiaknows, @hamil1
• Fix: new added query added to cookie block exclude to ensure Avada live builder works, props @franck_b, @markusand