Is my WordPress site GDPR compliant if I have a cookie banner plugin?

Not automatically. A banner plugin handles one piece of compliance: asking for consent. It does not guarantee that trackers actually wait for that consent, that your cookie policy is accurate, or that the rest of your data handling meets GDPR. Many WordPress sites with banners still set cookies before consent.

The gap between showing and blocking

A banner that displays but lets analytics and pixels load behind it is not collecting valid consent. Genuine compliance means non-essential scripts are technically blocked until the visitor says yes, and the visitor's choice is stored and respected on return visits.

What else GDPR asks of a WordPress site

Beyond cookies, GDPR expects a privacy policy that describes your data practices, a lawful basis for each kind of processing, a way to handle access and deletion requests, and care with forms, comments, and plugins that send data to third parties. The banner is the visible tip of the work.

How to check the actual state

Scan your site with a cookie audit tool and compare what it finds against your banner's cookie list and privacy policy. If the scan shows trackers your policy never mentions, or cookies firing before consent, the banner plugin alone has not made you compliant.