Skip to content
PluginCanary

WP Popups

WP Popups - WordPress Popup builder
by Damian · 30,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 26 Oct 2026, 7 releases in 24 months, no unpatched vulnerabilities.

90/ 100 Canary Score
Sub-scores for WP Popups
Ownership100
Maintenance100
Security95
Support70
Reputation70

How the score works

Quick answers

Is WP Popups still maintained?
Yes. Last release 26 Oct 2026, 7 releases in the last 24 months. 26 Oct 2026 · wordpress.org
Who owns WP Popups, and has it changed hands?
No change recorded. Main committer timersys since Nov 2019. 4 Nov 2026 · SVN log
Was WP Popups removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is WP Popups safe?
6 known vulnerabilities, all fixed (latest in 2.2.0.6). Not on the exploited list. 11 Jan 2026 · Wordfence Intelligence
Is the latest WP Popups update safe to install?
No ownership change before 2.2.0.9. No one-star spike after it. 26 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master27 Nov 2019 to 27 Nov 2019, 1 commits
timersys27 Nov 2019 to 26 Oct 2026, 68 commits

2 committers recorded. No ownership change since 2019.

Maintenance

Last release
9 days ago
Releases, 24 months
7
Tested up to
7.2 current
Requires PHP
5.7 supported 8.2+
Releases per quarter
Releases per quarter for WP Popups
Q1 20241
Q2 20242
Q3 20241
Q4 20240
Q1 20251
Q2 20250
Q3 20250
Q4 20250
Q1 20264
Q2 20260
Q3 20261
Q4 20261

Last release 26 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.9.

Average rating per quarter for WP Popups
Q4 20235.0
Q1 20245.0
Q2 20245.0
Q3 20245.0
Q4 20245.0
Q1 20255.0
Q2 20255.0
Q3 20254.9
Q4 20255.0
Q1 20265.0

Average rating stayed at 5.0 between Q4 2023 and Q1 2026.

Rating distribution
5 star107
4 star3
3 star1
2 star1
1 star0

Security record

1 vulnerability in 24 months (6 on record), patched (latest fixed in 2.2.0.6).

Show 6 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
11 Jan 2026WP Popups <= 2.2.0.5 - Missing Authorization4.3<= 2.2.0.52.2.0.638
11 Jul 2024WP Popups – WordPress Popup builder <= 2.2.0.1 - Unauthenticated Full Path Disclosure5.3<= 2.2.0.12.2.0.2Patched before disclosure
15 Mar 2024WP Popups <= 2.1.5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 2.1.5.52.1.5.6Patched before disclosure
17 Apr 2023WP Popups – WordPress Popup builder <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.1.52.1.5.1Patched before disclosure
23 Jan 2023WP Popups <= 2.1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.1.4.82.1.4.9Patched before disclosure
28 Dec 2022WP Popups <= 2.1.4.7 - Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode6.4<= 2.1.4.72.1.4.8Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 2 support threads resolved in the last 2 months.

Momentum

30,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP Popups
4 May 2026413
11 May 2026900
18 May 20261,025
25 May 2026955
1 Jun 2026853
8 Jun 2026802
15 Jun 2026783
22 Jun 2026696
29 Jun 2026769
6 Jul 2026667
13 Jul 2026716
20 Jul 2026762
27 Jul 2026796
3 Aug 2026686
10 Aug 2026639
17 Aug 202613,265
24 Aug 20263,228
31 Aug 20262,240
7 Sep 20261,576
14 Sep 20261,469
21 Sep 20261,388
28 Sep 20261,155
5 Oct 20261,151
12 Oct 20261,004
19 Oct 20261,503
26 Oct 202615,145
2 Nov 2026811

Weekly downloads over the last 4 weeks are 125% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

PoptinScore 96 · 20,000+Pop-upScore 93 · 10,000+Popup Builder & Popup Maker forScore 92 · 1,000,000+BoxzillaScore 92 · 20,000+Popups for DiviScore 91 · 100,000+

Facts

Version2.2.0.9
AuthorDamian
Added27 Nov 2019
Last updated26 Oct 2026
Active installs30,000+
Requires WordPress3.6
Tested up to7.2
Requires PHP5.7
CategoryMarketing & Advertising > Pop-ups & Lead Generation
Tagspopups, wp popup, wp popups, popup maker, popup builder

Other plugins by this author: GeoTargeting Lite - WordPress Geolocation, Export Featured Images, BP Disable Activation Reloaded, WP Export Categories & Taxonomies, Geo Redirects Lite

Questions

Is WP Popups still maintained?

Yes. Last release 26 Oct 2026, 7 releases in the last 24 months.

Who owns WP Popups, and has it changed hands?

No change recorded. Main committer timersys since Nov 2019.

Was WP Popups removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is WP Popups safe?

6 known vulnerabilities, all fixed (latest in 2.2.0.6). Not on the exploited list.

Is the latest WP Popups update safe to install?

No ownership change before 2.2.0.9. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue