Skip to content
PluginCanary

HollerBox

HollerBox - Fast & Effective Popups & Lead-Generation
by Adrian Tobey · 2,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 6 Oct 2026, 8 releases in 24 months, no unpatched vulnerabilities.

87/ 100 Canary Score
Sub-scores for HollerBox
Ownership100
Maintenance100
Security85
Support70
Reputation70

How the score works

Quick answers

Is HollerBox still maintained?
Yes. Last release 6 Oct 2026, 8 releases in the last 24 months. 6 Oct 2026 · wordpress.org
Who owns HollerBox, and has it changed hands?
No change recorded. Main committer trainingbusinesspros since Jul 2022. 3 Nov 2026 · SVN log
Was HollerBox removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is HollerBox safe?
4 known vulnerabilities, all fixed (latest in 2.3.15). Not on the exploited list. 8 Oct 2026 · Wordfence Intelligence
Is the latest HollerBox update safe to install?
No ownership change before 2.3.15. No one-star spike after it. 6 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
scottopolis6 Jun 2017 to 23 May 2022, 48 commits
trainingbusinesspros6 Jul 2022 to 6 Oct 2026, 55 commits

2 committers recorded. No ownership change since 2017.

Maintenance

Last release
29 days ago
Releases, 24 months
8
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for HollerBox
Q1 20240
Q2 20242
Q3 20240
Q4 20241
Q1 20250
Q2 20252
Q3 20251
Q4 20250
Q1 20260
Q2 20261
Q3 20262
Q4 20261

Last release 6 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.8.

Rating distribution
5 star30
4 star0
3 star0
2 star1
1 star1

Security record

2 vulnerabilities in 24 months (4 on record), all patched (latest fixed in 2.3.15).

Show 4 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
8 Oct 2026HollerBox — Fast & Effective Popups & Lead-Generation <= 2.3.14 - Unauthenticated Insecure Direct Object Reference5.3<= 2.3.142.3.15Patched before disclosure
2 Jun 2026HollerBox — Fast & Effective Popups & Lead-Generation <= 2.3.10.1 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.3.10.12.3.11Patched before disclosure
1 Sep 2023HollerBox <= 2.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 2.3.22.3.3Patched before disclosure
2 May 2023HollerBox <= 2.1.3 - Authenticated (edit_popups+) SQL Injection6.6< 2.1.42.1.41

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for HollerBox
4 May 202638
11 May 20261,481
18 May 2026460
25 May 2026192
1 Jun 2026232
8 Jun 2026247
15 Jun 2026153
22 Jun 2026107
29 Jun 202698
6 Jul 2026110
13 Jul 2026100
20 Jul 20261,283
27 Jul 20261,568
3 Aug 2026492
10 Aug 2026208
17 Aug 2026203
24 Aug 2026176
31 Aug 2026176
7 Sep 2026156
14 Sep 2026169
21 Sep 2026159
28 Sep 2026228
5 Oct 20261,798
12 Oct 2026440
19 Oct 2026441
26 Oct 2026405
2 Nov 202638

Weekly downloads over the last 4 weeks are 20% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

PoptinScore 96 · 20,000+Pop-upScore 93 · 10,000+Popup Builder & Popup Maker forScore 92 · 1,000,000+BoxzillaScore 92 · 20,000+Popups for DiviScore 91 · 100,000+

Facts

Version2.3.15
AuthorAdrian Tobey
Added6 Jun 2017
Last updated6 Oct 2026
Active installs2,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHPnot stated
CategoryMarketing & Advertising > Email Marketing & Campaigns
Tagsemail, Optin, popup, popups, marketing

Other plugins by this author: Groundhogg - CRM, Newsletters, and Marketing Automation, FormLift for Keap (Legacy) Web Forms, MailHawk - Simple SMTP, Email Delivery, and Email Logging, Auto Fill Form Fields, Live Chat for WordPress - WP Simple Chat - by Groundhogg, Infusionsoft Proxy Service

Questions

Is HollerBox still maintained?

Yes. Last release 6 Oct 2026, 8 releases in the last 24 months.

Who owns HollerBox, and has it changed hands?

No change recorded. Main committer trainingbusinesspros since Jul 2022.

Was HollerBox removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is HollerBox safe?

4 known vulnerabilities, all fixed (latest in 2.3.15). Not on the exploited list.

Is the latest HollerBox update safe to install?

No ownership change before 2.3.15. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue