Cookieless Privacy-Focused Google Analytics Security & Risk Analysis

wordpress.org/plugins/cookieless-privacy-focused-google-analytics

Enables Google Analytics without setting cookies or storing any data in the browser. Asking for user consent in the frontend should not be necessary.

200 active installs v1.0.1 PHP 7.0+ WP 4.4+ Updated Jun 5, 2020
analyticscookiegdprgoogle-analyticsprivacy
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Cookieless Privacy-Focused Google Analytics Safe to Use in 2026?

Generally Safe

Score 85/100

Cookieless Privacy-Focused Google Analytics has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 5yr ago
Risk Assessment

The plugin "cookieless-privacy-focused-google-analytics" v1.0.1 exhibits a strong security posture based on the provided static analysis and vulnerability history. The absence of any entry points like AJAX handlers, REST API routes, or shortcodes significantly limits the attack surface. Furthermore, the code signals indicate no dangerous functions were used, all SQL queries are prepared, and there are no file operations or external HTTP requests, which are all positive indicators. The limited output escaping (67% properly escaped) is a minor concern but not immediately critical given the lack of apparent attack vectors.

Key Concerns

  • Output escaping is not 100% protected
Vulnerabilities
None known

Cookieless Privacy-Focused Google Analytics Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Cookieless Privacy-Focused Google Analytics Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
2 escaped
Nonce Checks
0
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

67% escaped3 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
AddJavaScriptToPage (cookieless-privacy-focused-google-analytics.php:290)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Cookieless Privacy-Focused Google Analytics Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 5
actionadmin_menucookieless-privacy-focused-google-analytics.php:58
actionadmin_initcookieless-privacy-focused-google-analytics.php:61
actionadmin_initcookieless-privacy-focused-google-analytics.php:64
filterplugin_action_linkscookieless-privacy-focused-google-analytics.php:67
actionwp_headcookieless-privacy-focused-google-analytics.php:72
Maintenance & Trust

Cookieless Privacy-Focused Google Analytics Maintenance & Trust

Maintenance Signals

WordPress version tested5.4.19
Last updatedJun 5, 2020
PHP min version7.0
Downloads3K

Community Trust

Rating100/100
Number of ratings2
Active installs200
Developer Profile

Cookieless Privacy-Focused Google Analytics Developer Profile

hiroprot

2 plugins · 270 total installs

81
trust score
Avg Security Score
82/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Cookieless Privacy-Focused Google Analytics

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Script Paths
/wp-content/plugins/cookieless-privacy-focused-google-analytics/cookieless-google-analytics.js
Version Parameters
cookieless-privacy-focused-google-analytics/cookieless-google-analytics.js?ver=

HTML / DOM Fingerprints

HTML Comments
<!-- Cookieless Privacy-Focused Google Analytics -->
Data Attributes
data-trackingiddata-anonymizeipdata-linktrackingdata-eventtrackingdata-remarketingdata-search-keyword-param+5 more
JS Globals
window.cpfga
FAQ

Frequently Asked Questions about Cookieless Privacy-Focused Google Analytics