Skip to content
PluginCanary

PopupAlly

by AccessAlly · 2,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 28 May 2026, 4 releases in 24 months, no unpatched vulnerabilities.

87/ 100 Canary Score
Sub-scores for PopupAlly
Ownership100
Maintenance85
Security100
Support70
Reputation70

How the score works

Quick answers

Is PopupAlly still maintained?
Yes. Last release 28 May 2026, 4 releases in the last 24 months. 28 May 2026 · wordpress.org
Who owns PopupAlly, and has it changed hands?
No change recorded. Main committer rli since Mar 2014. 3 Nov 2026 · SVN log
Was PopupAlly removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is PopupAlly safe?
3 known vulnerabilities, all fixed (latest in 2.1.2). Not on the exploited list. 20 May 2024 · Wordfence Intelligence
Is the latest PopupAlly update safe to install?
No ownership change before 2.1.7. No one-star spike after it. 11 May 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
rli18 Mar 2014 to 4 Feb 2025, 120 commits
accessally21 Jun 2021 to 18 Jun 2024, 9 commits
caseproof22 May 2025 to 28 May 2026, 6 commits
cartpauj22 May 2025 to 22 May 2025, 4 commits

4 committers recorded. No ownership change since 2014.

Maintenance

Last release
5 months ago
Releases, 24 months
4
Tested up to
7.0 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for PopupAlly
Q1 20241
Q2 20242
Q3 20240
Q4 20240
Q1 20250
Q2 20253
Q3 20250
Q4 20250
Q1 20260
Q2 20261
Q3 20260
Q4 20260

Last release 28 May 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 4.1.

Rating distribution
5 star55
4 star3
3 star3
2 star4
1 star11

Security record

3 vulnerabilities on record, all patched (latest fixed in 2.1.2).

Show 3 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
20 May 2024PopupAlly <= 2.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 2.1.12.1.21
25 Apr 2024PopupAlly <= 2.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 2.1.12.1.226
30 Jan 2024PopupAlly <= 2.1.0 - Cross-Site Request Forgery via optin_submit_callback4.3<= 2.1.02.1.1Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for PopupAlly
4 May 202665
11 May 20261,499
18 May 2026472
25 May 2026254
1 Jun 2026145
8 Jun 2026138
15 Jun 2026105
22 Jun 202683
29 Jun 2026111
6 Jul 202696
13 Jul 2026109
20 Jul 202698
27 Jul 2026117
3 Aug 2026101
10 Aug 2026101
17 Aug 2026114
24 Aug 202685
31 Aug 202684
7 Sep 202698
14 Sep 2026118
21 Sep 2026121
28 Sep 2026110
5 Oct 2026112
12 Oct 2026110
19 Oct 2026172
26 Oct 2026180
2 Nov 202630

Weekly downloads over the last 4 weeks are 31% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

PoptinScore 96 · 20,000+Pop-upScore 93 · 10,000+Popup Builder & Popup Maker forScore 92 · 1,000,000+BoxzillaScore 92 · 20,000+Popups for DiviScore 91 · 100,000+

Facts

Version2.1.7
AuthorAccessAlly
Added18 Mar 2014
Last updated28 May 2026
Active installs2,000+
Requires WordPress6.0
Tested up to7.0.8
Requires PHPnot stated
CategoryMarketing & Advertising > Email Marketing & Campaigns
Tagspopups, lightbox, conversion, free popups, sign-up form

Other plugins by this author: AccessAlly™ LMS Migration from LearnDash®, AccessAlly™ LMS Migration from WP Courseware®, AccessAlly™ LMS Migration from Zippy Courses®

Questions

Is PopupAlly still maintained?

Yes. Last release 28 May 2026, 4 releases in the last 24 months.

Who owns PopupAlly, and has it changed hands?

No change recorded. Main committer rli since Mar 2014.

Was PopupAlly removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is PopupAlly safe?

3 known vulnerabilities, all fixed (latest in 2.1.2). Not on the exploited list.

Is the latest PopupAlly update safe to install?

No ownership change before 2.1.7. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue