Skip to content
PluginCanary

Icegram Engage - Popups, Welcome Bars, Optins, Slide-Ins & Lead Generation for WordPress

by Icegram · 10,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: vulnerability published 1 Oct 2026, fixed in 3.1.44.

83/ 100 Canary Score
Sub-scores for Icegram Engage - Popups, Welcome Bars, Optins, Slide-Ins & Lead Generation for WordPress
Ownership100
Maintenance100
Security60
Support70
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 1 Oct 2026, fixed in 3.1.44. Update to version 3.1.44 or later.1 Oct 2026Evidence
  • InfoSEC-37 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
Icegram15 May 2015 to 30 Oct 2026, 367 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
5 days ago
Releases, 24 months
18
Tested up to
7.1 current
Requires PHP
7.1 supported 8.2+
Releases per quarter for Icegram Engage - Popups, Welcome Bars, Optins, Slide-Ins & Lead Generation for WordPress
Q1 20242
Q2 20240
Q3 20245
Q4 20245
Q1 20250
Q2 20252
Q3 20250
Q4 20253
Q1 20263
Q2 20262
Q3 20262
Q4 20263

Last release 30 Oct 2026. Tested with WordPress 7.1 (current).

Support

67% of 3 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
1 Oct 2026Icegram Engage – Popups, Optins, CTAs & Lead Generation <= 3.1.31 - Authenticated (Contributor+) PHP Object Injection7.5<= 3.1.313.1.440
31 Jul 2026Icegram Engage <= 3.1.42 - Authenticated (Contributor+) Second-Order SQL Injection via 'messages[][id]' Parameter6.5<= 3.1.423.1.430
5 Jan 2026Icegram <= 3.1.35 - Missing Authorization5.3<= 3.1.353.1.360
3 Mar 2025Icegram Engage <= 3.1.31 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 3.1.313.1.320
3 Mar 2025Icegram Engage <= 3.1.31 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 3.1.313.1.320
24 Jan 2025Icegram <= 3.1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.1.313.1.320
16 Dec 2024Icegram Engage <= 3.1.31 - Authenticated (Author+) Stored Cross-Site Scripting6.4<= 3.1.313.1.320
16 Aug 2024Icegram <= 3.1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.1.253.1.260
12 Aug 2024Icegram <= 3.1.24 - Missing Authorization5.3<= 3.1.243.1.250
22 Jul 2024Icegram <= 3.1.24 - Missing Authorization to Unauthenticated Message Duplication5.3<= 3.1.243.1.250
5 Jan 2024Icegram <= 3.1.21 - Missing Authorization4.3<= 3.1.213.1.2254
28 Dec 2023Icegram <= 3.1.18 - Cross-Site Request Forgery via save_campaign_preview4.3<= 3.1.183.1.190
27 Dec 2023Icegram <= 3.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Message6.4<= 3.1.193.1.200
22 May 2023Icegram Engage <= 3.1.11 - Reflected Cross-Site Scripting6.1<= 3.1.113.1.120
30 May 2022Icegram Engage <= 2.1.7 - Cross-Site Scripting6.1< 2.1.82.1.80
22 Nov 2021Icegram <= 2.0.4 - Reflected Cross-Site Scripting via message_id6.1< 2.0.52.0.50
17 Aug 2021Icegram <= 2.0.2 - Authenticated Stored Cross-Site Scripting4.8<= 2.0.22.0.30
9 Jul 2019Icegram <= 1.10.28.2 - Cross-Site Scripting6.4<= 1.10.28.21.10.290
19 Jul 2016Icegram <= 1.9.18 - Cross-Site Request Forgery8.8< 1.9.191.9.190
19 Jul 2016Icegram <= 1.9.18 - Cross-Site Scripting6.1< 1.9.191.9.190

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Icegram Engage - Popups, Welcome Bars, Optins, Slide-Ins & Lead Generation for WordPress
Q2 20245.0
Q4 20245.0
Q1 20255.0
Q4 20255.0
Q3 20265.0

Average rating stayed at 5.0 between Q2 2024 and Q3 2026.

Rating distribution
5 star325
4 star17
3 star6
2 star4
1 star18
Latest low reviews

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Icegram Engage - Popups, Welcome Bars, Optins, Slide-Ins & Lead Generation for WordPress
4 May 2026494
11 May 20261,101
18 May 20261,611
25 May 2026826
1 Jun 2026647
8 Jun 2026621
15 Jun 2026673
22 Jun 2026691
29 Jun 2026537
6 Jul 2026556
13 Jul 2026533
20 Jul 2026589
27 Jul 20266,938
3 Aug 20263,436
10 Aug 20261,126
17 Aug 2026960
24 Aug 2026968
31 Aug 2026833
7 Sep 2026710
14 Sep 2026701
21 Sep 20266,893
28 Sep 20261,827
5 Oct 20268,518
12 Oct 20261,493
19 Oct 20261,612
26 Oct 202614,238
2 Nov 2026505

Weekly downloads over the last 4 weeks are 102% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Poptin - Email Marketing Automation, Newsletter & Exit Pop Ups, Email PopupsScore 96 · 20,000+Pop-upScore 93 · 10,000+Popup Builder & Popup Maker for WordPress - OptinMonster Email Marketing and Lead GenerationScore 92 · 1,000,000+Boxzilla - WordPress Popup BuilderScore 92 · 20,000+Popups for DiviScore 91 · 100,000+

Facts

Version3.1.47
AuthorIcegram
Added9 Jun 2014
Last updated30 Oct 2026
Active installs10,000+
Requires WordPress3.9
Tested up to7.1.4
Requires PHP7.1
CategoryMarketing & Advertising > Pop-ups & Lead Generation
TagsOptin, popup, popups, popup builder, lead generation

Other plugins by this author: Email Subscribers & Newsletters by Icegram Express - Email Marketing, Post Notifications & WooCommerce Marekting Automation for WordPress, Icegram Mailer - Reliable Email Deliverability, No-Code SMTP Replacement & Email Logs for WordPress, Icegram Collect - Easy Contact Form, Subscription Form & Lead Collection Plugin for WordPress, Email Subscribers - Group Selector, Duplicate Pages and Posts - One-Click Clone WordPress Posts & Pages to Draft, Icegram Cookie Manager - GDPR, CCPA & Google Consent Mode v2 Cookie Banner (Fast & Free), Icegram User Switching - Switch User Accounts Instantly, Login as User & Test Roles for WordPress & WooCommerce, Icegram AI Content Engine - AI Blog Writer, SEO Content Generator & AEO Article Builder for WordPress

Questions

Is Icegram Engage - Popups, Welcome Bars, Optins, Slide-Ins & Lead Generation for WordPress still maintained?

Icegram Engage - Popups, Welcome Bars, Optins, Slide-Ins & Lead Generation for WordPress was last updated on 30 Oct 2026. Its Canary status is Healthy.

Is Icegram Engage - Popups, Welcome Bars, Optins, Slide-Ins & Lead Generation for WordPress safe?

Icegram Engage - Popups, Welcome Bars, Optins, Slide-Ins & Lead Generation for WordPress has no open unpatched vulnerabilities on record. 7 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Icegram Engage - Popups, Welcome Bars, Optins, Slide-Ins & Lead Generation for WordPress?

The wordpress.org author is Icegram. Recent committers: Icegram, niravmehta, plugin-master. We have recorded no ownership change.

What can I use instead of Icegram Engage - Popups, Welcome Bars, Optins, Slide-Ins & Lead Generation for WordPress?

Plugins in the same category with a higher Canary Score: Poptin - Email Marketing Automation, Newsletter & Exit Pop Ups, Email Popups, Pop-up, Popup Builder & Popup Maker for WordPress - OptinMonster Email Marketing and Lead Generation, Boxzilla - WordPress Popup Builder, Popups for Divi.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue