/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ SameSite Cookies

SameSite Cookies

By Ayesh Karunaratne

Security & Privacy / Security Scanning & Malware Protection

SameSite Cookies Review - In-Depth Analysis

Enhance security by adding SameSite flags to authentication cookies. This plugin helps prevent CSRF attacks effectively.

Performance Overview

WPS Score

6.71/10

User Rating

2.5/5 (based on 11+ reviews)

Active Installations

700+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

1 / 10 (Very Low Risk) It is calculated using the weighted average of all versions.

What It Does

This plugin adds the SameSite cookie flag to WordPress's authentication cookies. On supported browsers, this can effectively prevent all Cross-Site Request Forgery attacks throughout your WordPress site.

SameSite cookie flag support was added to PHP on version 7.3, but this plugin ships with a workaround to support all PHP versions WordPress supports.

There is no administrative UI provided: Activate this plugin, and you are all set!

You can configure the SameSite flag value from your WordPress configuration file. You can pick a value from Lax (default), Strict, or None. You can read about SameSite cookies here.

To configure the SameSite flag value, edit your WordPress configuration file (wp-config.php), and add the following lines right above /** Sets up WordPress vars and included files. */.

define( 'WP_SAMESITE_COOKIE', 'Lax' ); // Pick from 'Lax', 'Strict', or 'None'.

Note that only the authentication cookies are affected. Regular cookies that your installed plugins set will not be affected, nor provide any meaningful value with SameSite flags.

Comparing to Alternatives

SameSite Cookies is a plugin designed to manage cookie behavior, but it faces stiff competition from numerous well-established alternatives in the cookie consent and compliance space.

Top alternatives

Strengths

Addresses specific SameSite cookie attribute issues.
Simple and focused functionality.
No known security vulnerabilities.
Free to use without upsells.
Lightweight plugin footprint.

Weaknesses

High rate of user-reported login issues.
Limited compatibility with other plugins affecting cookies.
Lacks advanced cookie consent management features.
No pro version or premium support options.

User Sentiment Analysis

User reviews are polarized with a majority expressing dissatisfaction, reflected in a low average rating and frequent reports of critical issues.

Positive highlights

"Chrome errors disappeared after installing this plugin." — ramazan12345
"This plugin DOES work when other conflicting plugins are disabled." — Fer
"It sorted out my problem initially." — pypmaker

Common complaints

Plugin causes inability to log into WordPress backend.
Plugin does not work as intended for many users.
Users had to disable plugin forcibly to regain site access.
Wasted time due to plugin malfunctioning.

Weaknesses

Compatibility issues with other plugins affecting login cookies.
Unreliable functionality leading to site access problems.
Lack of clear documentation on conflicts and troubleshooting.

Who Should Use This?

Best for

Users who need a lightweight solution specifically targeting SameSite cookie attributes and are comfortable troubleshooting plugin conflicts.

Not ideal for

Users seeking a robust, user-friendly cookie consent management plugin or those who require guaranteed compatibility and support should avoid this plugin.

Pricing & Value

Free version includes

The free version offers basic SameSite cookie attribute management without additional features or support.

Final Verdict

SameSite Cookies addresses a niche need but suffers from significant usability and compatibility issues, leading to a high rate of negative user experiences. Its lack of advanced features and support options further limits its appeal compared to more comprehensive alternatives.

While it has no known security vulnerabilities, the plugin's instability and login problems make it a risky choice for most users. Those needing cookie management should consider more reliable and user-friendly plugins listed among the top alternatives.

Other Notable Features

Here are a few other notable features of this free SameSite Cookies plugin.

SameSite cookies

CSRF protection

authentication cookies

Screenshots

FAQ

Yeah, probably. This plugin uses what’s called “pluggable functions” supported in WordPress to replace wp_set_auth_cookie function.
This means that any other plugin that tampers with the login cookie parameters will override this plugin, and this plugin may not even get a chance to do what it does.