SameSite Cookies

Description

This plugin adds the “SameSite” cookie flag to WordPress’s authentication cookies. On supported browsers (all current IE, Edge, Chrome, and Firefox), this can effectively prevent all Cross-Site Request Forgery attacks throughout your WordPress site.

SameSite cookie flag support was added to PHP on version 7.3, but this plugin ships with a workaround to support all PHP versions WordPress supports.

There is no administrative UI provided: Activate this plugin and you are all set!

Installation

  1. Install this plugin as you would with any other plugin.
  2. Enable it.
  3. There is no third step – From this point afterwards, authentication cookies your WordPress site uses will contain SameSite flag, and you will be protected from CSRF attacks.

If you find this plugin useful, I’d appreciate you leaving a review on the plugin page.

FAQ

Do I need to have PHP 7.3 or later?

No. PHP 7.3 officially added SameSite cookie support, but this plugin comes with a polyfill to extend support to all previous PHP versions.

Is WordPress vulnerable to CSRF attacks without this plugin?

Without SameSite cookie, WordPress core and third party plugins must implement their own CSRF checks, which can be overlooked, intentionally ignored, or sometimes not even have thought about, which can be the case for contributed plugin. This plugin attempts to solve this with different take and complement existing solutions.

Reviews

October 26, 2019
I spent 30 minutes looking for an alternative since reviews said it does not work. Should have saved my time as this plugin works perfectly, just install, activate and that's it.
October 26, 2019
Didn't work and I was also unable to log back into wp-admin. I have to delete plugin to get back in.
October 23, 2019
It put me in a Admin loop (logging in did nothing). I hade go into cPanel and remove the plug-in, and then all was well...
Read all 5 reviews

Contributors & Developers

“SameSite Cookies” is open source software. The following people have contributed to this plugin.

Contributors

Translate “SameSite Cookies” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.