YITH WooCommerce Popup
Healthy: vulnerability published 14 Oct 2026, fixed in 1.60.0.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 80 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 14 Oct 2026, fixed in 1.60.0. Update to version 1.60.0 or later.14 Oct 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| yithemes | 31 Jul 2015 to 6 Oct 2026, 170 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 29 days ago
- Releases, 24 months
- 32
- Tested up to
- 7.1 current
- Requires PHP
- 8.0 supported 8.2+
| Q1 2024 | 3 |
|---|---|
| Q2 2024 | 2 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 2 |
| Q1 2026 | 20 |
| Q2 2026 | 4 |
| Q3 2026 | 4 |
| Q4 2026 | 2 |
Last release 6 Oct 2026. Tested with WordPress 7.1 (current).
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 14 Oct 2026 | YITH WooCommerce Popup < 1.60.0 - Missing Authorization | 4.3 | < 1.60.0 | 1.60.0 | 0 |
| 30 Jul 2025 | YITH WooCommerce Popup <= 1.48.0 - Cross-Site Request Forgery | 4.3 | <= 1.48.0 | 1.48.1 | 366 |
| 11 Nov 2022 | YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization | 7.1 | <= 1.21.0 | 1.21.1 | 153 |
| 11 Nov 2022 | YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery | 4.3 | <= 1.21.0 | 1.21.1 | 153 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 2.4 from 11 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 3 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 3 |
| 1 star | 5 |
Momentum
2,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 105 |
|---|---|
| 11 May 2026 | 136 |
| 18 May 2026 | 935 |
| 25 May 2026 | 257 |
| 1 Jun 2026 | 175 |
| 8 Jun 2026 | 172 |
| 15 Jun 2026 | 146 |
| 22 Jun 2026 | 849 |
| 29 Jun 2026 | 189 |
| 6 Jul 2026 | 254 |
| 13 Jul 2026 | 162 |
| 20 Jul 2026 | 132 |
| 27 Jul 2026 | 737 |
| 3 Aug 2026 | 292 |
| 10 Aug 2026 | 155 |
| 17 Aug 2026 | 707 |
| 24 Aug 2026 | 234 |
| 31 Aug 2026 | 157 |
| 7 Sep 2026 | 142 |
| 14 Sep 2026 | 141 |
| 21 Sep 2026 | 135 |
| 28 Sep 2026 | 144 |
| 5 Oct 2026 | 831 |
| 12 Oct 2026 | 406 |
| 19 Oct 2026 | 271 |
| 26 Oct 2026 | 229 |
| 2 Nov 2026 | 26 |
Weekly downloads over the last 4 weeks are 23% below the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.60.0 |
|---|---|
| Author | YITHEMES |
| Added | 31 Jul 2015 |
| Last updated | 6 Oct 2026 |
| Active installs | 2,000+ |
| Requires WordPress | 6.9 |
| Tested up to | 7.1.4 |
| Requires PHP | 8.0 |
| Category | E-commerce & Shopping |
| Tags | popup, pop up, popups, custom popup, woocommerce popup |
Other plugins by this author: YITH WooCommerce Wishlist, YITH WooCommerce Compare, YITH WooCommerce Quick View, YITH WooCommerce Ajax Product Filter, YITH WooCommerce Catalog Mode, YITH WooCommerce Ajax Search, YITH WooCommerce Product Add-Ons, YITH WooCommerce Gift Cards, YITH WooCommerce Badge Management, YITH WooCommerce Product Gallery & Image Zoom, YITH Request a Quote for WooCommerce, YITH Color and Label Variations for WooCommerce
Questions
Is YITH WooCommerce Popup still maintained?
YITH WooCommerce Popup was last updated on 6 Oct 2026. Its Canary status is Healthy.
Is YITH WooCommerce Popup safe?
YITH WooCommerce Popup has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns YITH WooCommerce Popup?
The wordpress.org author is YITHEMES. Recent committers: yithemes, plugin-master. We have recorded no ownership change.
What can I use instead of YITH WooCommerce Popup?
Plugins in the same category with a higher Canary Score: Poptin - Email Marketing Automation, Newsletter & Exit Pop Ups, Email Popups, Pop-up, Popup Builder & Popup Maker for WordPress - OptinMonster Email Marketing and Lead Generation, Boxzilla - WordPress Popup Builder, Popups for Divi.