Beautiful Cookie Consent Banner Security & Risk Analysis

wordpress.org/plugins/beautiful-and-responsive-cookie-consent

Free and beautiful Cookie Consent Banner to make your website compliant. Highly customizable and not loading any files from 3rd party servers.

40K active installs v4.9.2 PHP 7.0.0+ WP 4.0+ Updated Dec 1, 2025
cookie-bannercookie-consentcookie-consent-bannergdprgoogle-consent-mode-v2
93
A · Safe
CVEs total4
Unpatched0
Last CVEJul 1, 2025
Safety Verdict

Is Beautiful Cookie Consent Banner Safe to Use in 2026?

Generally Safe

Score 93/100

Beautiful Cookie Consent Banner has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.

4 known CVEsLast CVE: Jul 1, 2025Updated 5mo ago
Risk Assessment

The plugin 'beautiful-and-responsive-cookie-consent' v4.9.2 exhibits a mixed security posture. Static analysis reveals a generally good application of security best practices, with a notable absence of dangerous functions, external HTTP requests, and critical taint flows. The presence of nonces, capability checks, and a high percentage of properly escaped outputs are positive indicators. However, the vulnerability history presents a significant concern. With 4 known CVEs, including 2 high and 2 medium severity vulnerabilities, the plugin has a past of security weaknesses. The types of common vulnerabilities (XSS and Missing Authorization) are serious and require careful attention. While there are currently no unpatched vulnerabilities, the historical pattern suggests a recurring need for diligent security patching.

Key Concerns

  • 2 High Severity CVEs
  • 2 Medium Severity CVEs
  • Flows with unsanitized paths
  • SQL queries not fully prepared
  • File operations present
Vulnerabilities
4 published

Beautiful Cookie Consent Banner Security Vulnerabilities

CVEs by Year

1 CVE in 2022
2022
2 CVEs in 2023
2023
1 CVE in 2025
2025
Patched Has unpatched

Severity Breakdown

High
2
Medium
2

4 total CVEs

CVE-2025-49866medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Beautiful Cookie Consent Banner <= 4.6.1 - Reflected Cross-Site Scripting

Jul 1, 2025 Patched in 4.6.2 (8d)
CVE-2023-3388high · 7.2Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Beautiful Cookie Consent Banner <= 2.10.1 - Unauthenticated Stored Cross-Site Scripting

Jan 31, 2023 Patched in 2.10.2 (357d)

Beautiful Cookie Consent Banner <= 2.10.0 - Missing Authorization to Settings Update

Jan 31, 2023 Patched in 2.10.1 (357d)
CVE-2022-3823medium · 5.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Beautiful Cookie Consent Banner <= 2.9.0 - Authenticated (Admin+) Stored Cross-Site Scripting

Nov 3, 2022 Patched in 2.9.1 (446d)
Version History

Beautiful Cookie Consent Banner Release Timeline

v4.9.2Current
v4.9.1
v4.9.0
v4.8.0
v4.7.0
v4.6.3
v4.6.2
v4.6.11 CVE
v4.6.01 CVE
v4.5.61 CVE
v4.5.51 CVE
v4.5.41 CVE
v4.5.31 CVE
v4.5.21 CVE
v4.5.11 CVE
v4.5.01 CVE
v4.4.01 CVE
v4.3.11 CVE
v4.3.01 CVE
v4.2.11 CVE
Code Analysis
Analyzed Mar 16, 2026

Beautiful Cookie Consent Banner Code Analysis

Dangerous Functions
0
Raw SQL Queries
1
2 prepared
Unescaped Output
14
89 escaped
Nonce Checks
3
Capability Checks
4
File Operations
3
External Requests
0
Bundled Libraries
0

SQL Query Safety

67% prepared3 total queries

Output Escaping

86% escaped103 total outputs
Data Flows · Security
2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths
save_settings (class\class-nsc_bar_save_form_fields.php:66)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Beautiful Cookie Consent Banner Attack Surface

Entry Points2
Unprotected0

REST API Routes 1

POST/wp-json/beautiful-and-responsive-cookie-consent/v1/admin-noticesclass\class-nsc_bar_rest_api.php:12

Shortcodes 1

[cc_show_cookie_banner_nsc_bar] class\class-nsc_bar_frontend.php:66
WordPress Hooks 29
actionadmin_noticesclass\class-nsc_bar_admin_error.php:28
actionadmin_menuclass\class-nsc_bar_admin_settings.php:21
actionadmin_enqueue_scriptsclass\class-nsc_bar_admin_settings.php:22
actionadmin_enqueue_scriptsclass\class-nsc_bar_admin_settings.php:23
actionadmin_enqueue_scriptsclass\class-nsc_bar_admin_settings.php:24
actionwp_enqueue_scriptsclass\class-nsc_bar_frontend.php:64
actionadmin_noticesclass\class-nsc_bar_input_validation.php:495
actionnetwork_admin_noticesclass\class-nsc_bar_input_validation.php:496
filterwp_get_consent_typeclass\class-nsc_bar_integrations.php:19
filternsc_bar_return_filter_configured_cookie_nameclass\class-nsc_bar_return_filter.php:12
filternsc_bar_return_filter_dataLayer_banner_init_scriptclass\class-nsc_bar_return_filter.php:13
filternsc_bar_return_filter_banner_config_arrayclass\class-nsc_bar_return_filter.php:14
filternsc_bar_return_filter_cookie_settingclass\class-nsc_bar_return_filter.php:15
filternsc_bar_return_filter_user_consent_valuesclass\class-nsc_bar_return_filter.php:16
actionplugins_loadednsc_bar-cookie-consent.php:50
actionrest_api_initnsc_bar-cookie-consent.php:56
actionplugins_loadednsc_bar-cookie-consent.php:64
actionplugins_loadednsc_bar-cookie-consent.php:66
actionadmin_initnsc_bar-cookie-consent.php:72
actionsend_headersnsc_bar-cookie-consent.php:76
actionsend_headersnsc_bar-cookie-consent.php:77
actionsend_headersnsc_bar-cookie-consent.php:78
actionsend_headersnsc_bar-cookie-consent.php:79
actionwp_print_scriptsnsc_bar-cookie-consent.php:84
filterstyle_loader_tagnsc_bar-cookie-consent.php:86
filterscript_loader_tagnsc_bar-cookie-consent.php:87
filterrocket_excluded_inline_js_contentnsc_bar-cookie-consent.php:104
filterrocket_defer_inline_exclusionsnsc_bar-cookie-consent.php:105
actionplugins_loadednsc_bar-cookie-consent.php:108
Maintenance & Trust

Beautiful Cookie Consent Banner Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 1, 2025
PHP min version7.0.0
Downloads1.4M

Community Trust

Rating90/100
Number of ratings91
Active installs40K
Developer Profile

Beautiful Cookie Consent Banner Developer Profile

Nikel

5 plugins · 40K total installs

74
trust score
Avg Security Score
93/100
Avg Patch Time
406 days
View full developer profile
Detection Fingerprints

How We Detect Beautiful Cookie Consent Banner

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/beautiful-and-responsive-cookie-consent/admin/js/cookietypes.v2.js/wp-content/plugins/beautiful-and-responsive-cookie-consent/admin/js/iframeResizer/iframeResizer.min.js/wp-content/plugins/beautiful-and-responsive-cookie-consent/admin/js/bootstrap.bundle.min.js/wp-content/plugins/beautiful-and-responsive-cookie-consent/admin/js/admin.cookie-banner.min.js/wp-content/plugins/beautiful-and-responsive-cookie-consent/admin/css/bootstrap.min.css/wp-content/plugins/beautiful-and-responsive-cookie-consent/admin/css/admin.cookie-banner.css
Script Paths
/wp-content/plugins/beautiful-and-responsive-cookie-consent/admin/js/cookietypes.v2.js/wp-content/plugins/beautiful-and-responsive-cookie-consent/admin/js/iframeResizer/iframeResizer.min.js/wp-content/plugins/beautiful-and-responsive-cookie-consent/admin/js/bootstrap.bundle.min.js/wp-content/plugins/beautiful-and-responsive-cookie-consent/admin/js/admin.cookie-banner.min.js
Version Parameters
/wp-content/plugins/beautiful-and-responsive-cookie-consent/admin/js/cookietypes.v2.js?ver=/wp-content/plugins/beautiful-and-responsive-cookie-consent/admin/js/iframeResizer/iframeResizer.min.js?ver=/wp-content/plugins/beautiful-and-responsive-cookie-consent/admin/js/bootstrap.bundle.min.js?ver=/wp-content/plugins/beautiful-and-responsive-cookie-consent/admin/js/admin.cookie-banner.min.js?ver=/wp-content/plugins/beautiful-and-responsive-cookie-consent/admin/css/bootstrap.min.css?ver=/wp-content/plugins/beautiful-and-responsive-cookie-consent/admin/css/admin.cookie-banner.css?ver=

HTML / DOM Fingerprints

CSS Classes
nsc-cookie-banner
HTML Comments
<!-- Beautiful and responsive cookie consent -->
Data Attributes
data-nsc-bar-iddata-nsc-bar-type
JS Globals
nscBarAdminJsVars
REST Endpoints
/wp-json/nsc_bar/v1/save_settings
FAQ

Frequently Asked Questions about Beautiful Cookie Consent Banner