Changelog

September 12, 2026
  • NEW Added support for IAB TCF 2.4.
  • NEW Added Critical CSS and preload tags for improved performance.
  • NEW Added widget background setting to improve readability.
  • NEW Added WP-CLI commands for regenerating the JavaScript configuration and CSS styling files, including automatic cache clearing.
  • NEW Added the filter hooks borlabsCookie/frontendResources/deferNonCriticalCss, borlabsCookie/frontendResources/inlineCriticalCss, and borlabsCookie/styleBuilder/modifyCriticalCss.
  • IMPROVED Enhanced WP-CLI commands and added support for changing additional settings.
  • IMPROVED Reworked and re-enabled the compact TCF layout, which had been disabled since version 3.4.2.1.
  • IMPROVED Added more detailed scanner status information when a scan fails, making it easier to identify the cause.
  • IMPROVED Standardized the English translation to use sentence case instead of title case.
  • IMPROVED Improved and optimized overall code quality.
  • ERROR RESOLVED Fixed unnecessary loading of widget and TCF JavaScript when both features are disabled or not in use.
August 12, 2026
  • SECURITY UPDATE An XSS vulnerability was reported and has since been fixed. The vulnerability is difficult to exploit, as attackers are limited to just 35 characters of malicious code, which is only executed when an administrator opens the consent logs. As of version 3.4.2.2, the consent logs can be opened safely again. Kudos to Jörg for bringing this vulnerability to our attention.
August 10, 2026
  • WORKAROUND As requested by the IAB, the TCF compact layout has been temporarily disabled. It will undergo revisions and be re-enabled with version 3.4.3, expected by late August to mid-September 2026.
June 11, 2026
  • NEW Added the filter hook borlabsCookie/styleBlocker/shouldBlockUrl.
  • IMPROVED Script Blocker now respects additional attributes.
  • IMPROVED Prepared the Cloud Scanner to provide more detailed information in future scans when a page cannot be scanned.
  • IMPROVED Added new database indexes to slightly improve query performance.
  • ERROR RESOLVED When viewing the provider information of a Content Blocker, all services associated with the provider were listed. To make it clearer which service consent is granted to, only the service assigned to the Content Blocker is now displayed.
April 28, 2026
  • NEW Added support for TCF device storage disclosures.
  • IMPROVED Compatibility with WordPress 7.0 has been improved.
  • IMPROVED The Google Analytics check in the Debug Console now also includes the Google Site Kit service.
  • IMPROVED Compatibility across PHP 7.4 and PHP 8.5 has been improved.
  • ERROR RESOLVED A rare JavaScript error that occurred when consent was updated to essential services only while consent still existed for a service that no longer exists has been fixed.
  • IMPROVED The telemetry system was improved. For more information, please see https://borlabs.io/borlabs-cookie/telemetry/.
  • ERROR RESOLVED The text in mails containing navigation instructions to the settings has been corrected, as the location have changed in version 3.4.
  • ERROR RESOLVED The text in the Debug Console containing navigation instructions to the settings has been corrected, as the labels and location have changed in version 3.4.
March 2, 2026
  • IMPROVED As announced in the mailing dated May 9, 2025, we are now moving on to the fourth phase of automatic transition to Borlabs Cookie 3.4. In this phase, all websites that are not part of a multisite network will request the upgrade too. The upgrade can still be disabled via the dashboard in Borlabs Cookie.
February 6, 2026
  • NEW Setup Assistant with three setup types for Borlabs Cookie. Quick Setup automatically installs and configures all required packages. Custom Setup includes everything from Quick Setup and additionally asks for essential settings. Guided Setup includes everything from Custom Setup and adds explanations of the Borlabs Cookie basics along the way.
  • NEW Display of Settings Mode with the options "Standard" and "Simplified" to control how many settings are shown. Simplified is recommended for non-technical users, while Standard is intended for advanced or technical users who need full control.
  • NEW WordPress Admin Sidebar Menu Mode with three options "Simplified", "Standard", and "Expanded". Simplified displays only essential menu items, Standard shows the most commonly used settings, and Expanded shows all menu items as in previous versions of Borlabs Cookie.
  • NEW Safe Mode. When enabled, no compatibility patches from Borlabs Cookie are loaded. This helps recover websites that become unusable due to a third-party plugin update or a faulty compatibility patch. Safe Mode can be enabled via a link in the customer portal or via the PHP constant BORLABS_COOKIE_ENABLE_SAFE_MODE.
  • NEW Admin & Plugin Settings added. This new page allows configuring the new "Display of Settings Mode" and "WordPress Admin Sidebar Menu Mode". Settings that were previously available on the dashboard page have been moved to this page. The options for clearing third-party caches and controlling the meta box display have also been moved here from "General Settings", previously named "Settings".
  • NEW Introduced WP CLI command plugin-config which allows configuring the settings of the new "Admin & Plugin Settings" page.
  • NEW The JavaScript events borlabs-cookie-before-content-unblocked[{key}], borlabs-cookie-content-unblocked[{key}], borlabs-cookie-dialog-closing and borlabs-cookie-dialog-opening have been added. Further information about these hooks is documented in the article https://borlabs.io/kb/javascript-api-v3/.
  • IMPROVED The page "Settings" has been renamed to "General Settings". The settings have been restructured into "General Settings", "Consent Settings", and "Cookie Settings".
  • IMPROVED The horizontal navigation has been restructured. The focus is now on the core of Borlabs Cookie, namely the Library and Scanner. A direct link to installed packages has been added to the navigation.
  • IMPROVED The Library settings have been moved from the library to a dedicated settings page.
  • IMPROVED The color of some buttons has been adjusted to consistently reflect their behavior.
  • IMPROVED Multiple error and "Things to know" messages have been improved to provide clearer information about what went wrong and how to resolve the issue.
  • IMPROVED Updated third-party dependencies and added IAB TCF 2.3 support.
January 14, 2026
  • IMPROVED Click event registration has been improved to ensure that the click handler is only added once. This prevents duplicate registrations when third-party plugins remove and re-add a Content Blocker, which can cause our observer to re-add the handler.
  • IMPROVED Improved focus management when opening a Content Blocker modal.
December 11, 2025
  • IMPROVED As announced in the mailing dated May 9, 2025, we are now moving on to the third phase of automatic transition to Borlabs Cookie 3.3. In this phase, websites with a Agency Small license that are not part of a multisite network will request the upgrade too. The upgrade can still be disabled via the dashboard in Borlabs Cookie.
December 10, 2025
  • IMPROVED The FileManager class has been improved to support an upcoming package.