Skip to content
PluginCanary

Popup Box

Popup Box - Create Countdown, Coupon, Video, Contact Form Popups
by Ays Pro · 50,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 23 Oct 2026, 262 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for Popup Box
Ownership100
Maintenance100
Security60
SupportNo data
Reputation85

How the score works

Quick answers

Is Popup Box still maintained?
Yes. Last release 23 Oct 2026, 262 releases in the last 24 months. 23 Oct 2026 · wordpress.org
Who owns Popup Box, and has it changed hands?
No change recorded. Main committer ays-pro since Jun 2018. 4 Nov 2026 · SVN log
Was Popup Box removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Popup Box safe?
21 known vulnerabilities, all fixed (latest in 6.4.3). Not on the exploited list. 15 Oct 2026 · Wordfence Intelligence
Is the latest Popup Box update safe to install?
No ownership change before 6.4.5. No one-star spike after it. 23 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
ays-pro16 Jun 2018 to 23 Oct 2026, 1068 commits

1 committer recorded. No ownership change since 2018.

Maintenance

Last release
12 days ago
Releases, 24 months
262
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Popup Box
Q1 2024198
Q2 20249
Q3 202426
Q4 202426
Q1 202512
Q2 2025169
Q3 202514
Q4 202515
Q1 202612
Q2 202612
Q3 202610
Q4 20262

Last release 23 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (1 review). Lifetime: 4.6.

Average rating per quarter for Popup Box
Q4 20235.0
Q1 20245.0
Q2 20245.0
Q3 20245.0
Q4 20245.0
Q1 20253.0
Q3 20253.7
Q4 20255.0
Q1 20265.0
Q2 20265.0
Q3 20265.0

Average rating stayed at 5.0 between Q4 2023 and Q3 2026.

Rating distribution
5 star72
4 star3
3 star0
2 star0
1 star7
Latest low reviews

Security record

8 vulnerabilities in 24 months (21 on record), all patched (latest fixed in 6.4.3).

Show 21 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
15 Oct 2026Popup Box 6.4.1 - 6.4.2 - Unauthenticated Arbitrary Shortcode Execution via Client-IP / X-Forwarded-For HTTP Headers4.86.4.1 to 6.4.26.4.3Patched before disclosure
26 Jun 2026Popup Box - Create Countdown, Coupon, Video, Contact Form Popups <= 6.0.1 - Authenticated (Administrator+) SQL Injection4.9<= 6.0.16.0.2Patched before disclosure
16 Jun 2026Popup Box - Create Countdown, Coupon, Video, Contact Form Popups <= 6.2.9 - Reflected Cross-Site Scripting6.1<= 6.2.96.3.0Patched before disclosure
8 Apr 2026Popup Box - Create Countdown, Coupon, Video, Contact Form Popups < 5.5.0 - Unauthenticated Stored Cross-Site Scripting7.2< 5.5.05.5.0Patched before disclosure
30 Jan 2026Popup Box <= 6.1.1 - Cross-Site Request Forgery to Popup Status Change4.3<= 6.1.16.1.2Patched before disclosure
28 Dec 2025Popup box <= 6.0.7 - Cross-Site Request Forgery4.3<= 6.0.76.0.8Patched before disclosure
29 Oct 2025Popup box <= 5.5.4 - Cross-Site Request Forgery4.3<= 5.5.45.5.5Patched before disclosure
15 Nov 2024Popup Box - Create Countdown, Coupon, Video, Contact Form Popups <= 4.9.7 - Missing Authorization to Unauthenticated Limited Options Update5.3<= 4.9.74.9.8Patched before disclosure
31 Oct 2024Popup Box <= 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 4.7.74.7.8Patched before disclosure
20 Jun 2024Popup box <= 4.5.1 - Missing Authorization4.3<= 4.5.14.5.2Patched before disclosure
3 May 2024Popup box <= 4.1.2 - Cross-Site Request Forgery6.1<= 4.1.24.1.3348
24 Apr 2024Popup Box - Best WordPress Popup Plugin <= 4.3.6 - Missing Authorization to Information Exposure5.3<= 4.3.64.3.7357
22 Jan 2024Popup Box Business (7.0.0 - 7.9.0) and Developer (20.0.0 - 20.9.0) - Authenticated (Admin+) Stored Cross-Site Scripting6.67.0.0 to 7.9.07.9.0n/a
13 Nov 2023Popup Box <= 3.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4< 3.8.73.8.7520
13 Nov 2023Popup Box <= 3.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4< 3.8.73.8.7520
27 Oct 2023Popup Box - Best WordPress Popup Plugin <= 3.7.8 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 3.7.83.7.9537
29 Aug 2023Popup Box <= 3.7.1 - Authenticated(Administrator+) Stored Cross-Site Scripting4.4< 3.7.23.7.2596
18 Aug 2023Popup Box <= 3.7.0 - Authenticated(Administrator+) Stored Cross-Site Scripting4.4< 3.7.13.7.1607
8 Mar 2023Popup box <= 3.4.4 - Reflected Cross-Site Scripting via 'ays_pb_tab' Parameter5.4<= 3.4.43.4.5770
29 Jun 2021Popup box <= 2.3.3 - Cross-Site Scripting6.1<= 2.3.32.3.4979
29 Jun 2021Popup box < 2.3.4 - Authenticated SQL Injection8.8< 2.3.42.3.4979

Changelog mentions of security fixes: 6.3.0 (escaping).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 2 support threads resolved in the last 2 months.

Momentum

50,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Popup Box
4 May 202615,252
11 May 20265,284
18 May 202620,777
25 May 202618,899
1 Jun 202618,708
8 Jun 202616,649
15 Jun 20266,857
22 Jun 202617,573
29 Jun 20264,800
6 Jul 202618,191
13 Jul 202620,387
20 Jul 202619,230
27 Jul 20264,126
3 Aug 202619,464
10 Aug 20264,202
17 Aug 202619,244
24 Aug 202619,113
31 Aug 202618,424
7 Sep 20264,370
14 Sep 202619,459
21 Sep 202621,377
28 Sep 202618,484
5 Oct 20265,423
12 Oct 20262,669
19 Oct 202631,741
26 Oct 20267,465
2 Nov 2026614

Weekly downloads over the last 4 weeks are 24% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Website Pop-up Builder by BDOW!Score 100 · 10,000+WP PopupsScore 98 · 30,000+Pop-upScore 97 · 10,000+Popup Builder & Popup Maker forScore 96 · 1,000,000+BoxzillaScore 96 · 20,000+

Facts

Version6.4.5
AuthorAys Pro
Added16 Jun 2018
Last updated23 Oct 2026
Active installs50,000+
Requires WordPress4.0
Tested up to7.1.4
Requires PHPnot stated
CategoryE-commerce & Shopping
Tagsmodal, popup, pop up, popups, exit popup

Other plugins by this author: Secure Copy Content Protection and Content Locking, Quiz Maker by AYS, Poll Maker by AYS - Versus Polls, Anonymous Polls, Image Polls, Survey Maker by AYS, Chartify - WordPress Chart Plugin, Random Posts and Pages Widget, Photo Gallery by Ays - Responsive Image Gallery, AI ChatBot with ChatGPT and Content Generator by AYS, Advanced Related Posts, Portfolio Responsive Gallery, Easy Form, Popup Like box - Page Plugin

Questions

Is Popup Box still maintained?

Yes. Last release 23 Oct 2026, 262 releases in the last 24 months.

Who owns Popup Box, and has it changed hands?

No change recorded. Main committer ays-pro since Jun 2018.

Was Popup Box removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Popup Box safe?

21 known vulnerabilities, all fixed (latest in 6.4.3). Not on the exploited list.

Is the latest Popup Box update safe to install?

No ownership change before 6.4.5. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue