Icegram Engage – Popups, Optins, CTAs & Lead Generation

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 87% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

1. ★★★★★ anafery

   2mo ago

   Atendeu bem o que eu precisava: um banner informativo com data de ativação e desativação, funcionou muito bem.

   Read on wp.org ↗
2. ★★★★★ Daniel Figueiredo

   9mo ago

   Excelente plugin. Fácil de usar e eficaz, com bons recursos.

   Read on wp.org ↗
3. ★★★★★ rickvidallon

   1.5y ago

   Easy to use and integrate into WordPress and more importantly excellent support!

   Read on wp.org ↗
4. ★★★★★ drbob625

   1.6y ago

   Worked as expected first time – very little learning curve – thanks

   Read on wp.org ↗
5. ★★★★★ reulys

   1.6y ago

   Super team and support.

   Read on wp.org ↗
6. ★★★★★ Tsalwa

   1.8y ago

   I need a good popup/ engagement plugin and your is quick to set up. I was having a issue on my site and the support team at Icegram have been so helpful to me. This topic was modified 1 year, 8 months ago by Tsalwa.

   Read on wp.org ↗
7. ★★★★★ dzinfandel

   2.3y ago

   I only needed a quick and fast alert banner for a CTA and Icegram came recommended.It installed easily and I was able to quickly add a CTA banner and a pop up verification.There are so many other features available on the Pro version I did not know I needed and will be exploring those to increase the functionality of my basic site.

   Read on wp.org ↗
8. ★★★★★ forzaclaire

   2.4y ago

   Fixed my issue AND improved my post notification system

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.1.42 Fix: Small bug fix 3.1.42
2. — Version 3.1.41 Fix: “Specific URLs on this site” field is not getting saved properly 3.1.41
3. — Version 3.1.40 Fix: CTA action URL is not getting saved 3.1.40
4. — Version 3.1.39 Update: WordPress 6.9 compatibility check 3.1.39
5. — Version 3.1.38 Fix: Add new Campaign button not working in some cases 3.1.38
6. — Version 3.1.37 Fix: Improved security related to XSS [Thanks to Patchstack team] 3.1.37

19 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.5 Icegram Engage <= 3.1.42 - Authenticated (Contributor+) Second-Order SQL Injection via 'messages[][id]' Parameter ↗
   2026-07-31 CVE-2026-16087 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.1.42 Patched in 3.1.43
2. Medium · 5.3 Icegram <= 3.1.35 - Missing Authorization ↗
   2026-01-05 CVE-2025-68507 Missing Authorization Affects <= 3.1.35 Patched in 3.1.36
3. Medium · 4.4 Icegram Engage <= 3.1.31 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2025-03-03 CVE-2024-13482 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.31 Patched in 3.1.32
4. Medium · 4.4 Icegram Engage <= 3.1.31 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2025-03-03 CVE-2024-13486 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.31 Patched in 3.1.32
5. Medium · 6.4 Icegram <= 3.1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-01-24 CVE-2025-24542 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.31 Patched in 3.1.32
6. Medium · 6.4 Icegram Engage <= 3.1.31 - Authenticated (Author+) Stored Cross-Site Scripting ↗
   2024-12-16 CVE-2024-12302 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.31 Patched in 3.1.32
7. Medium · 6.4 Icegram <= 3.1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-08-16 CVE-2024-43344 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.25 Patched in 3.1.26
8. Medium · 5.3 Icegram <= 3.1.24 - Missing Authorization ↗
   2024-08-12 CVE-2024-43272 Missing Authorization Affects <= 3.1.24 Patched in 3.1.25
9. Medium · 5.3 Icegram <= 3.1.24 - Missing Authorization to Unauthenticated Message Duplication ↗
   2024-07-22 CVE-2024-39625 Missing Authorization Affects <= 3.1.24 Patched in 3.1.25
10. Medium · 4.3 Icegram <= 3.1.21 - Missing Authorization ↗
    2024-01-05 CVE-2024-21748 Missing Authorization Affects <= 3.1.21 Patched in 3.1.22
11. Medium · 4.3 Icegram <= 3.1.18 - Cross-Site Request Forgery via save_campaign_preview ↗
    2023-12-28 CVE-2023-52119 Cross-Site Request Forgery (CSRF) Affects <= 3.1.18 Patched in 3.1.19
12. Medium · 6.4 Icegram <= 3.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Message ↗
    2023-12-27 CVE-2023-51532 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.19 Patched in 3.1.20
13. Medium · 6.1 Icegram Engage <= 3.1.11 - Reflected Cross-Site Scripting ↗
    2023-05-22 CVE-2023-2398 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.11 Patched in 3.1.12
14. Medium · 6.1 Icegram Engage <= 2.1.7 - Cross-Site Scripting ↗
    2022-05-30 CVE-2022-1776 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 2.1.8 Patched in 2.1.8
15. Medium · 6.1 Icegram <= 2.0.4 - Reflected Cross-Site Scripting via message_id ↗
    2021-11-22 CVE-2021-24941 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 2.0.5 Patched in 2.0.5
16. Medium · 4.8 Icegram <= 2.0.2 - Authenticated Stored Cross-Site Scripting ↗
    2021-08-17 CVE-2021-36832 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.2 Patched in 2.0.3
17. Medium · 6.4 Icegram <= 1.10.28.2 - Cross-Site Scripting ↗
    2019-07-09 CVE-2019-15830 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.10.28.2 Patched in 1.10.29
18. High · 8.8 Icegram <= 1.9.18 - Cross-Site Request Forgery ↗
    2016-07-19 CVE-2016-10962 Cross-Site Request Forgery (CSRF) Affects < 1.9.19 Patched in 1.9.19
19. Medium · 6.1 Icegram <= 1.9.18 - Cross-Site Scripting ↗
    2016-07-19 CVE-2016-10963 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.9.19 Patched in 1.9.19

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 62 languages, 0 at 90% or more

Plus 38 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-04-07 20K+ → 10K+ down after 967 days in tier
2. 2023-08-14 30K+ → 20K+ down after 6 days in tier
3. 2023-08-08 20K+ → 30K+ up after 2 days in tier
4. 2023-08-06 30K+ → 20K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Popup Builder – Create highly converting, mobile friendly marketing popups. 200K+ installs · 4.7★ · 2 shared tags A
• Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content 20K+ installs · 4.8★ · 2 shared tags A
• Popupsmart 600+ installs · 4.0★ · 2 shared tags B
• Wisepops Popups & Notifications 500+ installs · 4.3★ · 2 shared tags A
• CocoPopup – Gutenberg Popup Builder for WordPress 50+ installs · 4.1★ · 2 shared tags C
• Popup Customizer 10+ installs · 3.6★ · 2 shared tags C

Embed this report card

Drop a live Pulse card for Icegram Engage – Popups, Optins, CTAs & Lead Generation into a readme, a review or a deck. It updates itself.

Icegram Engage – Popups, Optins, CTAs & Lead Generation: 10K+ active installs, 4.7★ (369 reviews). Plugin Pulse (WP Mayor), as of 2026-08-28. https://plugins.wpmayor.com/plugin/icegram