WP Manifestindependent plugin directory
manifest / privacy / bonsai-cookie-consent

Bonsai Cookie Consent WP Registry grade A. No security issues foundWP RegistryNo security issues foundOpen the reportA

A WordPress plugin that replaces YouTube embeds with a consent-safe placeholder until CookieScript marketing consent is granted.

★ 0stars
6release downloads
v2.5.2latest · 16d ago

Install

Download cookie-consent-video-embed-CookieScript.zip From the v2.5.2 release on GitHub, Oct 6, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/bonsai-systems/bonsai-cookie-consent/releases/download/v2.5.2/cookie-consent-video-embed-CookieScript.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

Bonsai Cookie Consent - CookieScript

A WordPress plugin by The Bonsai Digital Collective that replaces YouTube embeds with a consent-safe placeholder until CookieScript marketing consent is granted.

Status: Stable Requires: WordPress 6.4+ • PHP 7.4+

What It Does

  • Converts YouTube embeds to youtube-nocookie
  • Adds CookieScript-compatible attributes:
    • data-src
    • data-cookiecategory
  • Shows a consent placeholder before consent:
    • Thumbnail image
    • Darkened overlay
    • Centred consent message
    • Centred CTA link/button
  • Automatically reveals the iframe when CookieScript loads the src

Admin Settings

Path: Settings > Cookie Video Consent

  • Cookie category key — CookieScript category key to assign to video embeds (default: marketing).
  • Default video background image URL — If set, this overrides all YouTube thumbnails.
  • Consent text — Overlay message shown before consent. If left empty, the plugin default is used.
  • Consent link URL (optional) — If provided, CTA links to this URL. If empty, CTA attempts to open the CookieScript preferences popup.
  • Consent link label — Text shown on the CTA button.

Requirements

  • WordPress 6.4+
  • PHP 7.4+
  • CookieScript installed and active on the site

GitHub Updates

This plugin uses yahnis-elsts/plugin-update-checker to deliver updates via GitHub Releases.

  • Updater bootstrap is in the main plugin file.
  • Composer dependency is in composer.json.
  • Autoload path is vendor/autoload.php.

Release Workflow

  1. Commit plugin changes, including vendor/ and composer.lock.
  2. Bump Version in the main plugin file and CCVE_COOKIESCRIPT_VERSION constant.
  3. Create a GitHub Release tagged vX.X.X.
  4. Attach a release zip of the plugin folder.
  5. WordPress admin update checks will detect the newer release automatically.

Repository

https://github.com/Bonsai-Systems/bonsai-cookie-consent

This is the distribution repo that live sites' update checks pull from — it is intentionally separate from the origin dev remote (gakdesign/bonsai-cookie-consent) used for day-to-day development, matching the same split used by bonsai-code-injector. If the distribution repository is ever moved, update CCVE_COOKIESCRIPT_GITHUB_REPOSITORY in the main plugin file and the Update URI plugin header to match.

Release Notes

See CHANGELOG.md.

Author

Ben Ervine / The Bonsai Digital Collective

License

GPL-2.0+

Releases

8 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v2.5.2 latest
Oct 6, 2026 16d ago
cookie-consent-video-embed-CookieScript.zip
2
Sep 30, 2026 22d ago
cookie-consent-video-embed-CookieScript.zip cohort
2
Sep 30, 2026 22d ago
cookie-consent-video-embed-CookieScript.zip
0
Sep 30, 2026 22d ago
cookie-consent-video-embed-CookieScript.zip
2
Jul 23, 2026 3mo ago
tag only
—
Jul 23, 2026 3mo ago
tag only
—
V2
Jun 25, 2026 3mo ago
tag only
—
V1
Jun 25, 2026 4mo ago
tag only
—
A grade

Security

Bonsai Cookie Consent 2.3.1 · audited by WP Registry

No security issues found.

Audited release
2.3.1
Findings
none
Worst severity
—
Content hash
16ff2534ae317dc46439d9ef…

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.