Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder

Most reviewers call Popup Maker easy to set up and reliable, but a vocal minority, including one this month, ran into confusing onboarding, broken display settings, and gaps like date-based targeting.

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

1111 searches this plugin appeared in over the last 90 days, 20 listed. 1017 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 13 days ago and the previous band took 5 years to cross, so the real count is still just under 700K.

1. ★★★★★ jodword

   4mo ago

   Easy to setup and works great!

   Read on wp.org ↗
2. ★★★★★ queeneve

   4mo ago

   so much complicated with clear tutorials, although it has a bigyoutube channel but it doesnt explain how does it work It is not recommended at all, i wasted 2 hours trying to find out how it works and now i will deleted cause i cannot use it

   Read on wp.org ↗
3. ★★★★★ ianmel

   5mo ago

   I’ve come across this plugin just recently and decided to try it and i’m certainly glad that i did! I had been using Green Popups but it was breaking my pull-down menus (Popup Maker also but to a far lesser extent), so much so that it has totally solved a critical issue for me. I highly recommend it!

   Read on wp.org ↗
4. ★★★★★ mickinnis

   5mo ago

   Easy to use and works!

   Read on wp.org ↗
5. ★★★★★ kiki1904

   6mo ago

   Not possible to change existing popup

   Read on wp.org ↗
6. ★★★★★ jedes

   7mo ago

   Excellent functionality and a great balance between free and premium features.Lacking only one feature that would have been really functional for my needs: a targeting condition based on posts publication date. E.g. “show only on posts published before MM-DD-YYYY” or “show only on posts published after MM-DD-YYYY” (or even dynamic “show only on posts newer than XX days” or “show only on posts older than XX days”). At the moment, I am having dynamic targeting for recent posts by manually updating “selected posts” condition which is a bit burdensome.

   Read on wp.org ↗
7. ★★★★★ Kimberly D.

   7mo ago

   It is a simple pop-up plugin, no frills, but it works. I searched and tried several from this directory and all the others either didn’t work or you had to show their branding on your pop-ups. Thank you!

   Read on wp.org ↗
8. ★★★★★ davesorge

   9mo ago

   I made an account just so I could post a review on this awful excuse for a popup creator. None of the display settings work. The themes aren’t working. If you don’t care what it looks like, it might work fine for you. For context, I’ve been building WP websites for 20+ years. I’ve worked with thousands of plugins over the years. I know my way around WP like I know my own house. This plugin is as broken as any plugin I’ve ever tried. Don’t waste your time unless your only goals are failure and frustration. To the developers: You clearly don’t care about customers. Maybe try testing your software next time?

   Read on wp.org ↗

Recent releases and news for this plugin

1. 2026-09-10 Version 1.25.0 Security Hardened subscriber submissions and administration against stored cross-site scripting, including cleanup of legacy subscriber names. Hardened object-search label handling across admin and API paths with additio 1.25.0
2. 2026-08-03 Version 1.24.0 Security Security and resilience hardening based on continuous AI scanning. Hardened Subscribers page pagination URL escaping to prevent cross-site scripting (XSS). Features Added the free Popup Maker Debug Tools Chrome 1.24.0
3. 2026-06-28 Version 1.23.0 Security Tightened the permission checks required & improved validation for pro activation. Additional hardening based on continuous AI scanning. Features Added a “Preview Popup” option to the block editor’s Preview menu 1.23.0
4. 2026-03-31 Version 1.22.0 Features Added link click conversion tracking for external and special links (mailto:, tel:, etc.) within popups. Clicks are tracked via analytics beacon and categorized by link type for conversion reporting. Added Beave 1.22.0
5. 2025-10-13 Version 1.21.5 Improvements Optimized Google Fonts integration by eliminating database transients and API calls in favor of direct JSON loading with in-memory caching. This resolves reported database crashes from large font data and im 1.21.5
6. 2025-09-25 Version 1.21.4 Improvements Prevented misleading “Lite” messaging when extensions are active. Extension functionality will continue to work as expected. Fixes Fixed Editor role users not being able to edit popups and themes, changing d 1.21.4

All 22 disclosed vulnerabilities are patched in the current version (1.25.0). Sites still on an older version should update.

1. Patched High · 7.2 Popup Maker <= 1.24.0 - Unauthenticated Stored Cross-Site Scripting via values[Name] Parameter ↗
   2026-09-17 CVE-2026-87915 Improper Neutralization of Input During Web Page Generation Affects <= 1.24.0 Patched in 1.25.0
2. Patched Medium · 6.4 Popup Maker <= 1.24.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via post_title ↗
   2026-09-17 CVE-2026-15797 Improper Neutralization of Input During Web Page Generation Affects <= 1.24.0 Patched in 1.25.0
3. Patched High · 7.2 Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder <= 1.23.0 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-08-05 CVE-2026-28177 Improper Neutralization of Input During Web Page Generation Affects <= 1.23.0 Patched in 1.24.0
4. Patched High · 7.2 Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder <= 1.22.0 - Missing Authorization to Authenticated (Editor+) Arbitrary Plugin Installation ↗
   2026-07-08 CVE-2026-8848 Missing Authorization Affects <= 1.22.0 Patched in 1.23.0
5. Patched Medium · 6.4 Popup Maker <= 1.20.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameter ↗
   2025-09-25 CVE-2025-9490 Improper Neutralization of Input During Web Page Generation Affects <= 1.20.6 Patched in 1.21.0
6. Patched Medium · 6.4 Popup Maker <= 1.20.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via popupID Parameter ↗
   2025-06-02 CVE-2025-4205 Improper Neutralization of Input During Web Page Generation Affects <= 1.20.4 Patched in 1.20.5
7. Patched Medium · 6.4 Popup Maker <= 1.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-01-24 CVE-2025-24746 Improper Neutralization of Input During Web Page Generation Affects <= 1.20.2 Patched in 1.20.3
8. Patched Medium · 5.4 Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder <= 1.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-12-11 CVE-2024-10583 Improper Neutralization of Input During Web Page Generation Affects <= 1.20.2 Patched in 1.20.3
9. Patched Medium · 5.3 Popup Maker <= 1.19.2 - Missing Authorization ↗
   2024-09-30 CVE-2024-47358 Missing Authorization Affects <= 1.19.2 Patched in 1.20.0
10. Patched Medium · 6.4 Popup Maker <= 1.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-08-19 CVE-2024-7054 Improper Neutralization of Input During Web Page Generation Affects <= 1.19.0 Patched in 1.19.1
11. Patched Medium · 4.4 Popup Maker <= 1.19.0 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2024-08-19 CVE-2024-5561 Improper Neutralization of Input During Web Page Generation Affects <= 1.19.0 Patched in 1.19.1
12. Patched Medium · 6.4 Popup Maker – Popup for opt-ins, lead gen, & more <= 1.18.2 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-03-20 CVE-2024-2336 Improper Neutralization of Input During Web Page Generation Affects <= 1.18.2 Patched in 1.18.3
13. Patched Medium · 5.3 Popup Maker <= 1.17.1 - Sensitive Data Exposure via debug log file ↗
    2023-03-14 CVE-2022-47597 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.17.1 Patched in 1.18.0
14. Patched Medium · 5.4 Popup Maker <= 1.17.1 - Missing Authorization via save_popup_enabled_state ↗
    2023-03-09 CVE-2022-45819 Missing Authorization Affects <= 1.17.1 Patched in 1.18.0
15. Patched Medium · 4.3 Popup Maker <= 1.18.0 - Cross-Site Request Forgery via init ↗
    2023-03-08 Cross-Site Request Forgery Affects <= 1.18.0 Patched in 1.18.1
16. Patched Medium · 5.5 Popup Maker <= 1.16.10 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2022-10-31 CVE-2022-3690 Improper Neutralization of Input During Web Page Generation Affects <= 1.16.10 Patched in 1.16.11
17. Patched Medium · 6.4 Popup Maker <= 1.16.8 - Authenticated (Contributor+) Cross-Site Scripting ↗
    2022-09-26 CVE-2022-4381 Improper Neutralization of Input During Web Page Generation Affects <= 1.16.8 Patched in 1.16.9
18. Patched Medium · 6.4 Popup Maker <= 1.16.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
    2022-09-23 CVE-2022-4362 Improper Neutralization of Input During Web Page Generation Affects <= 1.16.8 Patched in 1.16.9
19. Patched Medium · 5.5 Popup Maker <= 1.16.4 - Authenticated (Admin+) Cross-Site Scripting ↗
    2022-04-19 CVE-2022-1104 Improper Neutralization of Input During Web Page Generation Affects <= 1.16.4 Patched in 1.16.5
20. Patched High · 7.5 Popup-Maker <= 1.8.12 - Unauthenticated information disclosure ↗
    2019-10-14 CVE-2019-17574 Improper Authentication Affects <= 1.8.12 Patched in 1.8.13
21. Patched High · 8.8 Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update ↗
    2019-02-25 Missing Authorization Affects < 1.8.3 Patched in 1.8.3
22. Patched Medium · 6.1 Popup Maker < 1.6.5 - Reflected Cross-Site Scripting ↗
    2017-07-24 CVE-2017-2284 Improper Neutralization of Input During Web Page Generation Affects < 1.6.5 Patched in 1.6.5

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 60 languages, 8 at 90% or more

Plus 36 more locales with partial translations.

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-10-19 700K+ → 600K+ down after 1841 days in tier
2. 2021-10-04 600K+ → 700K+ up after 307 days in tier
3. 2020-12-01 500K+ → 600K+ up after 182 days in tier
4. 2020-06-02 400K+ → 500K+ up after 259 days in tier
5. 2019-09-17 300K+ → 400K+ up after 290 days in tier
6. 2018-12-01 200K+ → 300K+ up after 341 days in tier
7. 2017-12-25 100K+ → 200K+ up after 250 days in tier
8. 2017-04-19 70K+ → 100K+ up after 127 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder into a readme, a review or a deck. It updates itself.

Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder: 600K+ active installs, 4.9★ (4,514 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/popup-maker