Mr Cookies Security & Risk Analysis

wordpress.org/plugins/mrcookies

MrCookies plugin adapts your Wordpress to satisfy the European cookies laws.

60 active installs v1.5.2 PHP + WP 3.0.1+ Updated Jun 8, 2015
cookiecookieseuropean-lawprivacy
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Mr Cookies Safe to Use in 2026?

Generally Safe

Score 85/100

Mr Cookies has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10yr ago
Risk Assessment

The mrcookies plugin v1.5.2 exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The complete absence of identified CVEs and the plugin's lack of any recorded vulnerabilities suggest a mature and well-maintained codebase. Furthermore, the code signals indicate good development practices, with 100% of SQL queries utilizing prepared statements and a nonce check being present, which are crucial for preventing common web vulnerabilities. The limited attack surface with no exposed AJAX handlers, REST API routes, or shortcodes is also a significant strength.

Key Concerns

  • Significant portion of output not properly escaped
  • Presence of file operations without explicit context
  • No capability checks found on entry points
Vulnerabilities
None known

Mr Cookies Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Mr Cookies Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
33
15 escaped
Nonce Checks
1
Capability Checks
0
File Operations
1
External Requests
0
Bundled Libraries
0

Output Escaping

31% escaped48 total outputs
Attack Surface

Mr Cookies Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 7
actionadmin_initinclude\backend.php:23
actionadmin_menuinclude\backend.php:29
actionwp_enqueue_scriptsinclude\frontend.php:43
actionwp_print_stylesinclude\frontend.php:72
actioninitmr-cookies.php:40
actionplugins_loadedmr-cookies.php:50
actionwpmu_new_blogmr-cookies.php:119
Maintenance & Trust

Mr Cookies Maintenance & Trust

Maintenance Signals

WordPress version tested4.2.39
Last updatedJun 8, 2015
PHP min version
Downloads3K

Community Trust

Rating96/100
Number of ratings6
Active installs60
Developer Profile

Mr Cookies Developer Profile

Artic Studio

1 plugin · 60 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Mr Cookies

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/mrcookies/css/style.min.css/wp-content/plugins/mrcookies/js/mrcookies.min.js/wp-content/plugins/mrcookies/js/mrcookies-admin.js
Script Paths
/wp-content/plugins/mrcookies/js/mrcookies-admin.js
Version Parameters
mrcookies-style?ver=mrcookies?ver=

HTML / DOM Fingerprints

CSS Classes
mrcookies-wrappermrcookies-container
JS Globals
MRCOOKIES
FAQ

Frequently Asked Questions about Mr Cookies