TCF Vendor List Not Downloading: Fix Folder Permission Errors

Sometimes, on certain installations, one of these warnings might appear in the Complianz dashboard:

  • “The CMP vendorlist files for TCF are not downloaded to, or reachable in the uploads folder yet.”
  • “The folder wp-content/uploads/complianz/cmp/vendorlist/ is not writable. The TCF vendor list files cannot be saved.”

Other signs that point to the same issue:

  • The IAB TCF menu stays locked after completing the wizard.
  • GVL JSON files are missing from the uploads folder.
  • The dashboard also flags a MaxMind/GeoIP warning, this often shares the same root cause, so it’s worth checking Manually Adding the MaxMind GeoIP Database as well.

What Causes This

The plugin downloads vendor list files from cookiedatabase.org and saves them to:

wp-content/uploads/complianz/cmp/vendorlist/

If the web server cannot write to that folder, the download fails silently. The plugin retries a maximum of 2 times, then waits 1 week before trying again, meaning the problem will not resolve on its own.

Please follow the steps below to solve this issue.

Step 1: Check Folder Permissions

Generally speaking, checking folder permissions is the first thing to do. The target folder needs to be set to 755.

If you use an FTP client such as FileZilla, please follow this guide: Folder Permissions.

If you use cPanel instead, you can refer to this article: How to Assign Permissions to Files and Folders in cPanel.

Alternatively, if you have terminal access (cPanel Terminal or SSH), you can apply the correct permissions to the entire Complianz uploads directory in one go with:

chmod -R 755 wp-content/uploads/complianz/

Step 2: Force the Vendor List Download

Once permissions are corrected (or confirmed correct), the plugin won’t retry automatically. Please try one of the options below.

Option A — Trigger an immediate re-download via URL

  1. Go to any Complianz admin page.
  2. Add ?cmplz_nocache to the URL, like this: https://yoursite.com/wp-admin/admin.php?page=complianz&cmplz_nocache
  3. Press Enter.

Option B — Toggle TCF to force the download

If Option A doesn’t trigger the download effectively, you can force it by toggling the TCF setting off and on again:

  1. Go to Wizard > Services.
  2. Find the question “Does your website contain scripts for advertising purposes?”
  3. Set it to No and save.
  4. Set it back to Yes and save again.

This toggle forces Complianz to re-initialize the advertising configuration and pull the vendor list fresh.

Still Seeing the Warning?

Please contact us and include all the steps you’ve already taken — this helps us identify the issue faster and, where useful, update the guide to assist the rest of the community.

 

Join 1M+ users and install The Privacy Suite for WordPress locally, automated or fully customized, and access our awesome support if you need any help!

Complianz has received its Google CMP Certification to conform to requirements for publishers using Google advertising products.