Skip to content
PluginCanary

iubenda

iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more
by iubenda · 200,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 2 Nov 2026, 142 releases in 24 months, no unpatched vulnerabilities.

89/ 100 Canary Score
Sub-scores for iubenda
Ownership100
Maintenance100
Security70
SupportNo data
Reputation85

How the score works

Quick answers

Is iubenda still maintained?
Yes. Last release 2 Nov 2026, 142 releases in the last 24 months. 2 Nov 2026 · wordpress.org
Who owns iubenda, and has it changed hands?
No change recorded. Main committer iubenda since May 2020. 4 Nov 2026 · SVN log
Was iubenda removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is iubenda safe?
6 known vulnerabilities, all fixed (latest in 3.13.5). Not on the exploited list. 4 Sep 2026 · Wordfence Intelligence
Is the latest iubenda update safe to install?
No ownership change before 3.13.7. No one-star spike after it. 2 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
dfactory14 Jul 2017 to 26 Mar 2020, 58 commits
iubenda11 May 2020 to 27 Nov 2024, 260 commits
moustafaiub22 Jan 2025 to 2 Nov 2026, 26 commits

3 committers recorded. No ownership change since 2015.

Maintenance

Last release
2 days ago
Releases, 24 months
142
Tested up to
7.1 current
Requires PHP
7.0.0 supported 8.2+
Releases per quarter
Releases per quarter for iubenda
Q1 20242
Q2 20244
Q3 20243
Q4 20242
Q1 20252
Q2 2025128
Q3 20251
Q4 20251
Q1 20262
Q2 20261
Q3 20263
Q4 20262

Last release 2 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (4 reviews). Lifetime: 4.7.

Average rating per quarter for iubenda
Q2 20255.0
Q3 20255.0
Q4 20254.5
Q1 20265.0
Q2 20264.8
Q3 20265.0
Q4 20265.0

Average rating stayed at 5.0 between Q2 2025 and Q4 2026.

Rating distribution
5 star363
4 star9
3 star5
2 star2
1 star19

Security record

2 vulnerabilities in 24 months (6 on record), all patched (latest fixed in 3.13.5).

Show 6 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
4 Sep 2026iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.13.4 - Unauthenticated Stored Cross-Site Scripting via Comment Content7.2<= 3.13.43.13.5Patched before disclosure
4 Sep 2026iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.13.4 - Unauthenticated Stored Cross-Site Scripting via Comment Content via AdSense Regex Rewrite7.2<= 3.13.43.13.5Patched before disclosure
12 Dec 2022iubenda <= 3.3.2 - Authenticated (Subscriber+) Privilege Escalation8.8<= 3.3.23.3.3903
6 Dec 2022iubenda <= 3.3.2 - Cross-Site Request Forgery8.8<= 3.3.23.3.3909
17 Jun 2022iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.0.8 - Server-Side Request Forgery8.3<= 3.0.73.0.81081
12 May 2020iubenda < 2.3.5 - Failure to Restrict URL Protocol6.5<= 2.3.42.3.51847

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

200,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for iubenda
4 May 20262,150
11 May 20266,575
18 May 20265,728
25 May 20265,316
1 Jun 20264,803
8 Jun 20265,105
15 Jun 202664,864
22 Jun 202615,498
29 Jun 202611,916
6 Jul 202626,244
13 Jul 202678,795
20 Jul 202621,667
27 Jul 202612,387
3 Aug 20269,679
10 Aug 20265,763
17 Aug 20266,643
24 Aug 202670,418
31 Aug 202675,102
7 Sep 202615,605
14 Sep 202624,207
21 Sep 202614,929
28 Sep 20268,270
5 Oct 20268,584
12 Oct 20266,368
19 Oct 20268,045
26 Oct 202695,480
2 Nov 202625,261

Weekly downloads over the last 4 weeks are 44% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

CookieAdminScore 100 · 400,000+WP Consent APIScore 100 · 300,000+Asesor de Cookies RGPD para normativaScore 100 · 20,000+Pressidium Cookie ConsentScore 100 · 10,000+tarteaucitron.ioScore 98 · 10,000+

Facts

Version3.13.7
Authoriubenda
Added5 Jun 2015
Last updated2 Nov 2026
Active installs200,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHP7.0.0
CategorySecurity & Privacy > GDPR & Privacy Compliance
TagsCCPA, GDPR, cookie banner, Privacy Policy, terms and conditions

Questions

Is iubenda still maintained?

Yes. Last release 2 Nov 2026, 142 releases in the last 24 months.

Who owns iubenda, and has it changed hands?

No change recorded. Main committer iubenda since May 2020.

Was iubenda removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is iubenda safe?

6 known vulnerabilities, all fixed (latest in 3.13.5). Not on the exploited list.

Is the latest iubenda update safe to install?

No ownership change before 3.13.7. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue