Popup Box – Create Countdown, Coupon, Video, Contact Form Popups

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 46% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ SyberKnight

   4mo ago

   free version has all the main features i needed and the interface isn’t super bloated with advertisements. interface isn’t as polished as others, but it works & seems solid so far.

   Read on wp.org ↗
2. ★★★★★ lewis

   5mo ago

   This plugin is amazing. BUT even more amazing is the extent of the customer service. They will not give up until you are satisfied. Highly recommended .Lewispipeworkpieces.com

   Read on wp.org ↗
3. ★★★★★ gmcconville

   5mo ago

   With a bit of hand-holding, not only does hover popups work perfect, but it helped me located a duplicate element on my website.

   Read on wp.org ↗
4. ★★★★★ liveolives

   6mo ago

   I took over management of a site that used this plug in and their customer service was very responsive and helped me figure out how it works and worked out some kinks from the previous set up. Would definitively recommend.

   Read on wp.org ↗
5. ★★★★★ ic0ach

   8mo ago

   This is a great plugin,

   Read on wp.org ↗
6. ★★★★★ wielko

   8mo ago

   It works flawlessly, meets all expectations, and is very intuitive to use. The team behind its development is extremely helpful, they respond quickly to questions and provide professional support. I highly recommend it to anyone looking for a reliable solution!

   Read on wp.org ↗
7. ★★★★★ trojan

   9mo ago

   Plugin works as intended. Super helpful support too.

   Read on wp.org ↗
8. ★★★★★ Matthias Schulz

   11mo ago

   Cannot deinstall it

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 6.3.6 Added: Current Popup Author Registered message variable on the general settings Improved: Code correction on the front-end Tested: Compatible up to WordPress 7.0.2 6.3.6
2. — Version 6.3.5 Added: Current Popup Author Website URL message variable on the general settings Tested: Compatible up to WordPress 7.0.1 6.3.5
3. — Version 6.3.4 Added: Current Popup Author Nickname message variable on the general settings 6.3.4
4. — Version 6.3.3 Added: User Website URL message variable on the general settings 6.3.3
5. — Version 6.3.2 Added: Post Author Roles message variable on the general settings 6.3.2
6. — Version 6.3.1 Added: Visual indicators (Documentation / YouTube icons) next to resource links for easier content recognition Improved: Some style and content changes on the admin dashboard Updated: Replaced outdated ays-pro links with 6.3.1

20 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.9 Popup Box – Create Countdown, Coupon, Video, Contact Form Popups <= 6.0.1 - Authenticated (Administrator+) SQL Injection ↗
   2026-06-26 CVE-2026-57631 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 6.0.1 Patched in 6.0.2
2. Medium · 6.1 Popup Box – Create Countdown, Coupon, Video, Contact Form Popups <= 6.2.9 - Reflected Cross-Site Scripting ↗
   2026-06-16 CVE-2026-54192 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 6.2.9 Patched in 6.3.0
3. High · 7.2 Popup Box – Create Countdown, Coupon, Video, Contact Form Popups < 5.5.0 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-04-08 CVE-2025-15611 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 5.5.0 Patched in 5.5.0
4. Medium · 4.3 Popup Box <= 6.1.1 - Cross-Site Request Forgery to Popup Status Change ↗
   2026-01-30 CVE-2026-1165 Cross-Site Request Forgery (CSRF) Affects <= 6.1.1 Patched in 6.1.2
5. Medium · 4.3 Popup box <= 6.0.7 - Cross-Site Request Forgery ↗
   2025-12-28 CVE-2025-69021 Cross-Site Request Forgery (CSRF) Affects <= 6.0.7 Patched in 6.0.8
6. Medium · 4.3 Popup box <= 5.5.4 - Cross-Site Request Forgery ↗
   2025-10-29 CVE-2025-57931 Cross-Site Request Forgery (CSRF) Affects <= 5.5.4 Patched in 5.5.5
7. Medium · 5.3 Popup Box – Create Countdown, Coupon, Video, Contact Form Popups <= 4.9.7 - Missing Authorization to Unauthenticated Limited Options Update ↗
   2024-11-15 CVE-2024-10861 Missing Authorization Affects <= 4.9.7 Patched in 4.9.8
8. Medium · 4.4 Popup Box <= 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2024-10-31 CVE-2024-9599 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.7.7 Patched in 4.7.8
9. Medium · 4.3 Popup box <= 4.5.1 - Missing Authorization ↗
   2024-06-20 CVE-2024-37096 Missing Authorization Affects <= 4.5.1 Patched in 4.5.2
10. Medium · 6.1 Popup box <= 4.1.2 - Cross-Site Request Forgery ↗
    2024-05-03 CVE-2024-34367 Cross-Site Request Forgery (CSRF) Affects <= 4.1.2 Patched in 4.1.3
11. Medium · 5.3 Popup Box – Best WordPress Popup Plugin <= 4.3.6 - Missing Authorization to Information Exposure ↗
    2024-04-24 CVE-2024-3897 Missing Authorization Affects <= 4.3.6 Patched in 4.3.7
12. Medium · 6.6 Popup Box Business (7.0.0 - 7.9.0) and Developer (20.0.0 - 20.9.0) - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2024-01-22 CVE-2023-6591 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects 7.0.0 - 7.9.0 Patched in 7.9.0
13. Medium · 4.4 Popup Box <= 3.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2023-11-13 CVE-2023-5809 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 3.8.7 Patched in 3.8.7
14. Medium · 4.4 Popup Box <= 3.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2023-11-13 CVE-2023-5874 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 3.8.7 Patched in 3.8.7
15. Medium · 4.4 Popup Box – Best WordPress Popup Plugin <= 3.7.8 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2023-10-27 CVE-2023-5343 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.7.8 Patched in 3.7.9
16. Medium · 4.4 Popup Box <= 3.7.1 - Authenticated(Administrator+) Stored Cross-Site Scripting ↗
    2023-08-29 CVE-2023-4390 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 3.7.2 Patched in 3.7.2
17. Medium · 4.4 Popup Box <= 3.7.0 - Authenticated(Administrator+) Stored Cross-Site Scripting ↗
    2023-08-18 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 3.7.1 Patched in 3.7.1
18. Medium · 5.4 Popup box <= 3.4.4 - Reflected Cross-Site Scripting via 'ays_pb_tab' Parameter ↗
    2023-03-08 CVE-2023-27414 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.4.4 Patched in 3.4.5
19. Medium · 6.1 Popup box <= 2.3.3 - Cross-Site Scripting ↗
    2021-06-29 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.3.3 Patched in 2.3.4
20. High · 8.8 Popup box < 2.3.4 - Authenticated SQL Injection ↗
    2021-06-29 CVE-2021-24458 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 2.3.4 Patched in 2.3.4

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 11 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-02-28 40K+ → 50K+ up after 246 days in tier
2. 2024-06-27 30K+ → 40K+ up after 188 days in tier
3. 2023-12-22 20K+ → 30K+ up after 191 days in tier
4. 2023-06-14 10K+ → 20K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Smart Popup by Supsystic 10K+ installs · 4.5★ · 3 shared tags A
• YITH WooCommerce Popup 2K+ installs · 3.2★ · 3 shared tags B
• MakeITeasy Popup 1K+ installs · 4.3★ · 3 shared tags B
• Magic Popups – Custom and Lightweight Popups 100+ installs · 4.0★ · 3 shared tags D
• Stylistic Modals – Create Beautiful Popups with the Gutenberg Editor 100+ installs · 4.2★ · 3 shared tags D
• Popup – Popup Maker 70+ installs · 3.9★ · 3 shared tags D

Embed this report card

Drop a live Pulse card for Popup Box – Create Countdown, Coupon, Video, Contact Form Popups into a readme, a review or a deck. It updates itself.

Popup Box – Create Countdown, Coupon, Video, Contact Form Popups: 50K+ active installs, 4.6★ (81 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/ays-popup-box