{"id":100165,"date":"2019-03-23T12:16:08","date_gmt":"2019-03-23T12:16:08","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/show-me-the-cookies\/"},"modified":"2026-06-27T18:19:17","modified_gmt":"2026-06-27T18:19:17","slug":"show-me-the-cookies","status":"publish","type":"plugin","link":"https:\/\/scn.wordpress.org\/plugins\/show-me-the-cookies\/","author":1424004,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.2","stable_tag":"1.2","tested":"7.0.1","requires":"5.9","requires_php":"8.0","requires_plugins":null,"header_name":"Show Me The Cookies","header_author":"Jay Versluis","header_description":"Displays a list of all cookies used on your site","assets_banners_color":"b99b74","last_updated":"2026-06-27 18:19:17","external_support_url":"","external_repository_url":"","donate_link":"https:\/\/patreon.com\/versluis","header_plugin_uri":"https:\/\/wpguru.co.uk\/2019\/03\/show-me-the-cookies-how-to-list-all-cookies-on-your-wordpress-site\/","header_author_uri":"https:\/\/wpguru.tv","rating":4.8,"author_block_rating":0,"active_installs":500,"downloads":6358,"num_ratings":4,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0":{"tag":"1.0","author":"versluis","date":"2022-11-04 15:40:30"},"1.1":{"tag":"1.1","author":"versluis","date":"2026-06-23 02:32:11"},"1.2":{"tag":"1.2","author":"versluis","date":"2026-06-27 18:19:17"}},"upgrade_notice":[],"ratings":{"1":0,"2":0,"3":0,"4":1,"5":3},"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":2055872,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":2055872,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":2055872,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":2055872,"resolution":"772x250","location":"assets","locale":"","width":1544,"height":500}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0","1.1","1.2"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":2055872,"resolution":"1","location":"assets","locale":"","width":736,"height":637},"screenshot-2.png":{"filename":"screenshot-2.png","revision":2055872,"resolution":"2","location":"assets","locale":"","width":659,"height":433}},"screenshots":{"1":"List of cookies in the Admin Interface","2":"Example of shortcode displayed in TwentyThirteen theme"}},"plugin_section":[],"plugin_tags":[388,389,131785,396],"plugin_category":[54],"plugin_contributors":[80014],"plugin_business_model":[],"class_list":["post-100165","plugin","type-plugin","status-publish","hentry","plugin_tags-cookie","plugin_tags-cookies","plugin_tags-gdpr","plugin_tags-privacy","plugin_category-security-and-spam-protection","plugin_contributors-versluis","plugin_committers-versluis"],"banners":{"banner":"https:\/\/ps.w.org\/show-me-the-cookies\/assets\/banner-772x250.png?rev=2055872","banner_2x":"https:\/\/ps.w.org\/show-me-the-cookies\/assets\/banner-1544x500.png?rev=2055872","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/show-me-the-cookies\/assets\/icon-128x128.png?rev=2055872","icon_2x":"https:\/\/ps.w.org\/show-me-the-cookies\/assets\/icon-256x256.png?rev=2055872","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/show-me-the-cookies\/assets\/screenshot-1.png?rev=2055872","caption":"List of cookies in the Admin Interface"},{"src":"https:\/\/ps.w.org\/show-me-the-cookies\/assets\/screenshot-2.png?rev=2055872","caption":"Example of shortcode displayed in TwentyThirteen theme"}],"raw_content":"<!--section=description-->\n<p>Show Me The Cookies displays all current cookies your site is using. Once activated, you can find this list under <strong>Appearance - Cookies<\/strong>.<\/p>\n\n<p>You can also display this list to your visitors by placing the shortcode [cookies] into any post or page.<\/p>\n\n<p>WordPress uses several cookies under the hood by default. If you'd like to filter these out, use the shortcode [cookies-nowp], which will show a message if no non-WordPress cookies are found.<\/p>\n\n<p>This plugin is based on code by David Artiss, who kindly made it available on GitHub.<\/p>\n\n<p>To find out more about what cookies are and what can be done with them, please read https:\/\/en.wikipedia.org\/wiki\/HTTP_cookie<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Either: Upload the entire folder <code>cookies<\/code> to the <code>\/wp-content\/plugins\/<\/code> directory.<\/li>\n<li>Or: Download the ZIP file, then head over to Plugins - Add New - Upload Plugin, then browse to your file.<\/li>\n<li>Or: From Plugins - Add New, search for \"show me the cookies\" and hit Install.<\/li>\n<li>Then: Activate the plugin through the Plugins menu in WordPress.<\/li>\n<li>You can view your cookies under Appearance - Cookies.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<p>None so far.<\/p>\n\n<!--section=changelog-->\n<h4>1.2<\/h4>\n\n<ul>\n<li>Security: added sensitive cookie denylist \u2014 hides WordPress auth, session, and token cookies from shortcode output<\/li>\n<li>Security: cookie values are now masked in all output (first 3 + \u2022\u2022\u2022 + last 3 characters)<\/li>\n<li>Security: shortcodes now hide values by default; opt in with show_values=\"true\" to display masked values<\/li>\n<li>Security: added admin notice warning that cookie values may contain sensitive session data<\/li>\n<li>Removed: is_wp_cookie() replaced by the more robust is_sensitive_cookie() denylist method<\/li>\n<li>Changed: [cookies] and [cookies-nowp] shortcode attribute novalue replaced by show_values=\"true\"<\/li>\n<li>Improved: admin cookie list shows all cookies (including WordPress ones) with masked values<\/li>\n<li>Added: cookie value size (character count) displayed beneath each value in the admin list<\/li>\n<li>Fixed: [cookies] shortcode now shows an informative message when no non-sensitive cookies are found<\/li>\n<\/ul>\n\n<h4>1.1<\/h4>\n\n<ul>\n<li>Security: escaped all cookie name and value output to prevent XSS<\/li>\n<li>Security: removed do_shortcode() wrapping on cookie data to prevent shortcode injection<\/li>\n<li>Security: added direct file access guard<\/li>\n<li>Security: removed third-party social media scripts from admin page<\/li>\n<li>Fixed: undefined variables in admin cookie list function (PHP 8 compatibility)<\/li>\n<li>Fixed: capability check mismatch between menu registration and access guard<\/li>\n<li>Added: Text Domain declaration for translations<\/li>\n<li>Updated: requires PHP 8.0 and WordPress 5.9 or later<\/li>\n<li>Code: refactored into a class to avoid global namespace pollution<\/li>\n<li>Improved: shortcode and admin cookie list now share a consistent format (Cookie #N \/ Value)<\/li>\n<li>Improved: [cookies-nowp] shows a message when no non-WordPress cookies are found<\/li>\n<li>Removed: custom separator feature (enclosing shortcode form [cookies]...[\/cookies])<\/li>\n<\/ul>\n\n<h4>1.0<\/h4>\n\n<ul>\n<li>Initial Release<\/li>\n<li>Based on code by David Artiss (thanks, David!)<\/li>\n<\/ul>","raw_excerpt":"Shows a list of all current cookies on your site, both for admins and visitors (optional).","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/scn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/100165","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/scn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/scn.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/scn.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=100165"}],"author":[{"embeddable":true,"href":"https:\/\/scn.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/versluis"}],"wp:attachment":[{"href":"https:\/\/scn.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=100165"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/scn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=100165"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/scn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=100165"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/scn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=100165"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/scn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=100165"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/scn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=100165"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}