WP Popups – WordPress Popup builder

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 86% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

The recent download trend is too spiky to read. The range spans more than 10x because wp.org publishes install counts as broad bands, and conversion and price compound on top. Read the midpoint as an order of magnitude, not a valuation.

1. ★★★★★ alexcz

   5mo ago

   I switched to this plugin because I needed a popup to open when triggered by a certain URL. So glad I made the switch as it is very easy to use and support questions are answered very quickly. Recommend!

   Read on wp.org ↗
2. ★★★★★ jtomppo

   5mo ago

   Works okay and easy to use.

   Read on wp.org ↗
3. ★★★★★ john2016

   9mo ago

   Works great

   Read on wp.org ↗
4. ★★★★★ jpkergastel

   12mo ago

   Très bon Plugin,

   Read on wp.org ↗
5. ★★★★★ alb614

   1.0y ago

   All I wanted was a simple popup, that is easy to set up. This one does just that.

   Read on wp.org ↗
6. ★★★★★ ulfplano

   1.0y ago

   I use this popup because it is easy to use and very good for a lot of users like me who just want to use it out of the box.

   Read on wp.org ↗
7. ★★★★★ imfromio

   1.1y ago

   I just went through 3-4 different popup plugins and this one has the simplest format AND the best visibility rules. So many others don’t allow you to set visibility by users logged in status. This one worked great!

   Read on wp.org ↗
8. ★★★★★ binhobernardes

   1.1y ago

   Muito simples de usar para popup. Criei uma arte, subi em um blank template, salvei e publiquei. E lá estava o meu popup perfeitamente na home page do site. Parabéns aos desenvolvedores!

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.2.0.7 Added user agent rules and contains operators 2.2.0.7
2. — Version 2.2.0.6 Packing previous commits again (2.2.0.5|2.2.0.4), they were missing from svn 2.2.0.6
3. — Version 2.2.0.5 Added more allowed tags to our kses posts function 2.2.0.5
4. — Version 2.2.0.4 Fixed security issue where a malicius admin could get content for other posts that are not related to wppopups Fixed issue with keyword url 2.2.0.4
5. — Version 2.2.0.3 Fixed issue with iframe not being allowed in content Fixed issue with rules for weekday failing Fixed issue with Browser rule not working 2.2.0.3
6. — Version 2.2.0.2 New positions Fix for video elements Fix for popups to display instantaneous not showing randomly Fix php 8 compatibility errors Fixed vulnerability where site PATH can be disclosed to be used later by a malicius user (t 2.2.0.2

6 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 WP Popups <= 2.2.0.5 - Missing Authorization ↗
   2026-01-11 CVE-2026-24616 Missing Authorization Affects <= 2.2.0.5 Patched in 2.2.0.6
2. Medium · 5.3 WP Popups – WordPress Popup builder <= 2.2.0.1 - Unauthenticated Full Path Disclosure ↗
   2024-07-11 CVE-2024-6555 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.2.0.1 Patched in 2.2.0.2
3. Medium · 4.4 WP Popups <= 2.1.5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2024-03-15 CVE-2024-29105 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1.5.5 Patched in 2.1.5.6
4. Medium · 6.4 WP Popups – WordPress Popup builder <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2023-04-17 CVE-2023-1905 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1.5 Patched in 2.1.5.1
5. Medium · 6.4 WP Popups <= 2.1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2023-01-23 CVE-2023-24003 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1.4.8 Patched in 2.1.4.9
6. Medium · 6.4 WP Popups <= 2.1.4.7 - Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode ↗
   2022-12-28 CVE-2022-4716 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1.4.7 Patched in 2.1.4.8

Automated install-time checks, tested on PHP 8.1.12 · WP 6.7.2

Translated into 8 languages, 2 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

No tier crossings observed yet.

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• CM Pop-Up – Create engaging popups to capture attention and boost interaction 8K+ installs · 3.6★ · 4 shared tags B
• WP Popup Builder – Popup Forms and Marketing Lead Generation 2K+ installs · 3.8★ · 4 shared tags B
• Pretty Simple Popup Builder 200+ installs · 3.9★ · 3 shared tags B
• Popup Builder – Create highly converting, mobile friendly marketing popups. 200K+ installs · 4.7★ · 2 shared tags A
• Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers 70K+ installs · 4.3★ · 2 shared tags A
• Boxzilla – WordPress Popup Builder 20K+ installs · 4.8★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for WP Popups – WordPress Popup builder into a readme, a review or a deck. It updates itself.

WP Popups – WordPress Popup builder: 30K+ active installs, 4.9★ (112 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/wp-popups-lite