Skip to content
PluginCanary

Popup Box

Popup Box - Easily Create WordPress Popups
by Wow-Company · 6,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 25 Aug 2026, 14 releases in 24 months, no unpatched vulnerabilities.

96/ 100 Canary Score
Sub-scores for Popup Box
Ownership100
Maintenance100
Security90
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Popup Box still maintained?
Yes. Last release 25 Aug 2026, 14 releases in the last 24 months. 25 Aug 2026 · wordpress.org
Who owns Popup Box, and has it changed hands?
No change recorded. Main committer Wpcalc since Jan 2020. 3 Nov 2026 · SVN log
Was Popup Box removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Popup Box safe?
5 known vulnerabilities, all fixed (latest in 3.2.13). Not on the exploited list. 17 Feb 2026 · Wordfence Intelligence
Is the latest Popup Box update safe to install?
No ownership change before 3.2.15. No one-star spike after it. 8 May 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master28 Jan 2020 to 28 Jan 2020, 1 commits
Wpcalc29 Jan 2020 to 25 Aug 2026, 80 commits

2 committers recorded. No ownership change since 2020.

Maintenance

Last release
2 months ago
Releases, 24 months
14
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Popup Box
Q1 20240
Q2 20244
Q3 20241
Q4 20244
Q1 20253
Q2 20252
Q3 20252
Q4 20252
Q1 20261
Q2 20261
Q3 20260
Q4 20260

Last release 25 Aug 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 5.0.

Rating distribution
5 star11
4 star0
3 star0
2 star0
1 star0

Security record

2 vulnerabilities in 24 months (5 on record), all patched (latest fixed in 3.2.13).

Show 5 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
17 Feb 2026Popup Box - Easily Create WordPress Popups <= 3.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.2.123.2.13Patched before disclosure
24 Jan 2025Popup Box <= 3.2.4 - Cross-Site Request Forgery4.3<= 3.2.43.2.5Patched before disclosure
11 Apr 2024Popup Box - new WordPress popup plugin <= 2.2.6 - Cross-Site Request Forgery4.3<= 2.2.62.2.7Patched before disclosure
22 May 2023Multiple Wow-Company Plugins (Various Versions) -- Reflected Cross-Site Scripting via 'page' parameter6.1<= 2.2.12.2.2Patched before disclosure
17 May 2022Popup Box <= 2.1.2 - Authenticated Local File Inclusion6.8<= 2.1.22.2Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

6,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Popup Box
4 May 20261,238
11 May 2026588
18 May 2026441
25 May 2026280
1 Jun 2026224
8 Jun 2026254
15 Jun 2026183
22 Jun 2026141
29 Jun 2026201
6 Jul 2026184
13 Jul 2026182
20 Jul 2026219
27 Jul 2026185
3 Aug 2026195
10 Aug 2026162
17 Aug 2026186
24 Aug 2026256
31 Aug 2026182
7 Sep 2026180
14 Sep 2026179
21 Sep 2026193
28 Sep 2026258
5 Oct 2026199
12 Oct 2026191
19 Oct 2026287
26 Oct 2026242
2 Nov 202643

Weekly downloads over the last 4 weeks are 27% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Website Pop-up Builder by BDOW!Score 100 · 10,000+WP PopupsScore 98 · 30,000+Pop-upScore 97 · 10,000+

Facts

Version3.2.15
AuthorWow-Company
Added29 Jan 2020
Last updated25 Aug 2026
Active installs6,000+
Requires WordPress5.5
Tested up to7.1.4
Requires PHP7.4
CategoryMarketing & Advertising > Pop-ups & Lead Generation
Tagsalert, popup, banner, overlay, modal window

Other plugins by this author: Float menu - awesome floating side menu, Sticky Buttons - Floating Buttons Builder, WP Coder - Insert & Manage Code Snippets, Modal Window - create popup modal window, Hover Effects - easily create any hover effect, Side Menu Lite - Sticky Floating Side Menu, Floating Button - Easily Create Sticky, Fixed & Floating Buttons, Button Generator - Easily Create Custom Buttons with Icons and Analytics, Bubble Menu - Floating Button Menu with Sticky Navigation, Counter Box - Add Countdowns, Timers & Dynamic Counters to WordPress, Calculator Builder - Create an Online Calculator, HTML Editor for Contact Form 7

Questions

Is Popup Box still maintained?

Yes. Last release 25 Aug 2026, 14 releases in the last 24 months.

Who owns Popup Box, and has it changed hands?

No change recorded. Main committer Wpcalc since Jan 2020.

Was Popup Box removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Popup Box safe?

5 known vulnerabilities, all fixed (latest in 3.2.13). Not on the exploited list.

Is the latest Popup Box update safe to install?

No ownership change before 3.2.15. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue