WP Manifestindependent plugin directory
manifest / privacy / ctx-gdpr

CTX GDPR WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

Wordpress Plugin for DSGVO Stuff

★ 0stars
4release downloads
v1.0.3latest · 1 year ago

Install

Download ctx-gdpr.zip From the v1.0.3 release on GitHub, May 23, 2025

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/gollenia/ctx-gdpr/releases/download/v1.0.3/ctx-gdpr.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Contexis GDPR Cookie Consent

A customizable WordPress block-based cookie consent system for GDPR compliance. Includes a modal dialog, REST API integration, cookie handling, and conditional content rendering based on user consent.

Features

  • Gutenberg block to add a Cookie Settings Button and Modal
  • Customizable texts and layout inside the block editor
  • Supports both required and third-party cookies
  • Remembers consent using cookies
  • Simple REST API to handle user interaction
  • Optional filtering/removal of forbidden blocks (like YouTube embeds) when consent is not granted
  • Fully stylable and extendable

How it Works

  1. Users can open the modal to configure cookie preferences.
  2. The modal contains options for:
    • Required cookies (always active)
    • Third-party cookies (user choice)
  3. Clicking Accept All or Save Settings stores the consent via the REST API.
  4. If full consent is not granted, defined blocks (e.g. embeds) are removed from frontend rendering.
  5. Consent is stored in two cookies:
    • ctx_cookie_ok: basic consent
    • ctx_cookie_all: full consent

Gutenberg Block

You can add the ctx-gdpr/modal block to any post, page, or template. It contains:

  • A button with optional icon and custom title
  • Modal window with:
    • Paragraph/text blocks (editable)
    • Two checkboxes (required cookies, third-party cookies)
    • Accept/Save buttons

Use the block inspector to configure modal options such as:

  • Modal title
  • Fullscreen mode
  • Icon symbol
  • Default value for third-party cookies
  • Block types to disable (e.g. core/embed, someplugin/custom-embed)

REST API

POST /wp-json/ctx-gdpr/v2/consent

Saves user consent.

Parameters

Name Type Description
all 1 or 0 1 enables full consent, 0 disables it

Releases

2 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v1.0.3 latest
May 23, 2025 1 year ago
ctx-gdpr.zip
4
Feb 23, 2024 2 years ago
tag only
—
A- grade

Security

CTX GDPR 1.0.3 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
1.0.3
Findings
1
Worst severity
low
Content hash
beee5d71a7da900ce8c010ab…

Findings

  • low Consent REST endpoint lacks CSRF/nonce protection

    csrf

    register_rest_route permission_callback is __return_true and get_rest_data sets ctx_cookie_ok/ctx_cookie_all cookies from request params with no nonce. Cross-site POSTs can forge consent state (limited impact).

    lib/Cookies.php:19-50

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.