Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

Most reviewers call Popup Maker easy to set up and reliable, but a vocal minority, including one this month, ran into confusing onboarding, broken display settings, and gaps like date-based targeting.

1. ★★★★★ jodword

   2mo ago

   Easy to setup and works great!

   Read on wp.org ↗
2. ★★★★★ queeneve

   2mo ago

   so much complicated with clear tutorials, although it has a bigyoutube channel but it doesnt explain how does it work It is not recommended at all, i wasted 2 hours trying to find out how it works and now i will deleted cause i cannot use it

   Read on wp.org ↗
3. ★★★★★ ianmel

   3mo ago

   I’ve come across this plugin just recently and decided to try it and i’m certainly glad that i did! I had been using Green Popups but it was breaking my pull-down menus (Popup Maker also but to a far lesser extent), so much so that it has totally solved a critical issue for me. I highly recommend it!

   Read on wp.org ↗
4. ★★★★★ mickinnis

   3mo ago

   Easy to use and works!

   Read on wp.org ↗
5. ★★★★★ kiki1904

   4mo ago

   Not possible to change existing popup

   Read on wp.org ↗
6. ★★★★★ jedes

   4mo ago

   Excellent functionality and a great balance between free and premium features.Lacking only one feature that would have been really functional for my needs: a targeting condition based on posts publication date. E.g. “show only on posts published before MM-DD-YYYY” or “show only on posts published after MM-DD-YYYY” (or even dynamic “show only on posts newer than XX days” or “show only on posts older than XX days”). At the moment, I am having dynamic targeting for recent posts by manually updating “selected posts” condition which is a bit burdensome.

   Read on wp.org ↗
7. ★★★★★ Kimberly D.

   5mo ago

   It is a simple pop-up plugin, no frills, but it works. I searched and tried several from this directory and all the others either didn’t work or you had to show their branding on your pop-ups. Thank you!

   Read on wp.org ↗
8. ★★★★★ davesorge

   7mo ago

   I made an account just so I could post a review on this awful excuse for a popup creator. None of the display settings work. The themes aren’t working. If you don’t care what it looks like, it might work fine for you. For context, I’ve been building WP websites for 20+ years. I’ve worked with thousands of plugins over the years. I know my way around WP like I know my own house. This plugin is as broken as any plugin I’ve ever tried. Don’t waste your time unless your only goals are failure and frustration. To the developers: You clearly don’t care about customers. Maybe try testing your software next time?

   Read on wp.org ↗

Recent releases and news for this plugin

1. 2026-08-03 Version 1.24.0 Security Security and resilience hardening based on continuous AI scanning. Hardened Subscribers page pagination URL escaping to prevent cross-site scripting (XSS). Features Added the free Popup Maker Debug Tools Chrome 1.24.0
2. 2026-06-28 Version 1.23.0 Security Tightened the permission checks required & improved validation for pro activation. Additional hardening based on continuous AI scanning. Features Added a “Preview Popup” option to the block editor’s Preview menu 1.23.0
3. 2026-03-31 Version 1.22.0 Features Added link click conversion tracking for external and special links (mailto:, tel:, etc.) within popups. Clicks are tracked via analytics beacon and categorized by link type for conversion reporting. Added Beave 1.22.0
4. 2025-10-13 Version 1.21.5 Improvements Optimized Google Fonts integration by eliminating database transients and API calls in favor of direct JSON loading with in-memory caching. This resolves reported database crashes from large font data and im 1.21.5
5. 2025-09-25 Version 1.21.4 Improvements Prevented misleading “Lite” messaging when extensions are active. Extension functionality will continue to work as expected. Fixes Fixed Editor role users not being able to edit popups and themes, changing d 1.21.4
6. 2025-09-21 Version 1.21.3 Fixes Fixed page builder compatibility issues by reverting popup preloading timing to wp_enqueue_scripts:11 (matching v1.20.6 behavior). Fixed delayed initialization of $.fn.popmake.triggers object for proper backward co 1.21.3

20 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.2 Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder <= 1.23.0 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-08-05 CVE-2026-28177 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.23.0 Patched in 1.24.0
2. High · 7.2 Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder <= 1.22.0 - Missing Authorization to Authenticated (Editor+) Arbitrary Plugin Installation ↗
   2026-07-08 CVE-2026-8848 Missing Authorization Affects <= 1.22.0 Patched in 1.23.0
3. Medium · 6.4 Popup Maker <= 1.20.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameter ↗
   2025-09-25 CVE-2025-9490 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.20.6 Patched in 1.21.0
4. Medium · 6.4 Popup Maker <= 1.20.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via popupID Parameter ↗
   2025-06-02 CVE-2025-4205 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.20.4 Patched in 1.20.5
5. Medium · 6.4 Popup Maker <= 1.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-01-24 CVE-2025-24746 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.20.2 Patched in 1.20.3
6. Medium · 5.4 Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder <= 1.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-12-11 CVE-2024-10583 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.20.2 Patched in 1.20.3
7. Medium · 5.3 Popup Maker <= 1.19.2 - Missing Authorization ↗
   2024-09-30 CVE-2024-47358 Missing Authorization Affects <= 1.19.2 Patched in 1.20.0
8. Medium · 6.4 Popup Maker <= 1.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-08-19 CVE-2024-7054 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.19.0 Patched in 1.19.1
9. Medium · 4.4 Popup Maker <= 1.19.0 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2024-08-19 CVE-2024-5561 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.19.0 Patched in 1.19.1
10. Medium · 6.4 Popup Maker – Popup for opt-ins, lead gen, & more <= 1.18.2 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-03-20 CVE-2024-2336 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.18.2 Patched in 1.18.3
11. Medium · 5.3 Popup Maker <= 1.17.1 - Sensitive Data Exposure via debug log file ↗
    2023-03-14 CVE-2022-47597 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.17.1 Patched in 1.18.0
12. Medium · 5.4 Popup Maker <= 1.17.1 - Missing Authorization via save_popup_enabled_state ↗
    2023-03-09 CVE-2022-45819 Missing Authorization Affects <= 1.17.1 Patched in 1.18.0
13. Medium · 4.3 Popup Maker <= 1.18.0 - Cross-Site Request Forgery via init ↗
    2023-03-08 Cross-Site Request Forgery (CSRF) Affects <= 1.18.0 Patched in 1.18.1
14. Medium · 5.5 Popup Maker <= 1.16.10 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2022-10-31 CVE-2022-3690 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.16.10 Patched in 1.16.11
15. Medium · 6.4 Popup Maker <= 1.16.8 - Authenticated (Contributor+) Cross-Site Scripting ↗
    2022-09-26 CVE-2022-4381 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.16.8 Patched in 1.16.9
16. Medium · 6.4 Popup Maker <= 1.16.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
    2022-09-23 CVE-2022-4362 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.16.8 Patched in 1.16.9
17. Medium · 5.5 Popup Maker <= 1.16.4 - Authenticated (Admin+) Cross-Site Scripting ↗
    2022-04-19 CVE-2022-1104 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.16.4 Patched in 1.16.5
18. High · 7.5 Popup-Maker <= 1.8.12 - Unauthenticated information disclosure ↗
    2019-10-14 CVE-2019-17574 Improper Authentication Affects <= 1.8.12 Patched in 1.8.13
19. High · 8.8 Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update ↗
    2019-02-25 Missing Authorization Affects < 1.8.3 Patched in 1.8.3
20. Medium · 6.1 Popup Maker < 1.6.5 - Reflected Cross-Site Scripting ↗
    2017-07-24 CVE-2017-2284 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.6.5 Patched in 1.6.5

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 58 languages, 6 at 90% or more

Plus 34 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

No tier crossings observed yet.

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation 1M+ installs · 4.3★ · 4 shared tags A
• Advanced Popups 60K+ installs · 3.9★ · 4 shared tags B
• HollerBox — Fast & Effective Popups & Lead-Generation 2K+ installs · 4.5★ · 4 shared tags A
• Hustle – Email Marketing, Lead Generation, Optins, Popups 90K+ installs · 4.4★ · 3 shared tags A
• AI Popup Builder & Popup Maker by OptiMonk 3K+ installs · 4.6★ · 3 shared tags B
• Floating Awesome Button (Sticky Button, Popup, Toast) & 200+ Website Custom Interactive Element 700+ installs · 4.2★ · 3 shared tags B

Embed this report card

Drop a live Pulse card for Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder into a readme, a review or a deck. It updates itself.

Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder: 700K+ active installs, 4.9★ (4,503 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/popup-maker