Alligator Popup Security & Risk Analysis

wordpress.org/plugins/alligator-popup

Add popups to your site. Add links to pages/posts via a shortcode which will be opened in a popup browser window.

2K active installs v2.0.0 PHP + WP 4.9+ Updated Jun 23, 2025
jquerypopuppopup-windowpopupsshortcode
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Alligator Popup Safe to Use in 2026?

Generally Safe

Score 100/100

Alligator Popup has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9mo ago
Risk Assessment

The "alligator-popup" v2.0.0 plugin exhibits a strong security posture based on the provided static analysis. The absence of dangerous functions, reliance on prepared statements for SQL, and proper output escaping are excellent indicators of secure coding practices. Furthermore, the plugin has no recorded vulnerabilities or CVEs, suggesting a history of responsible development and maintenance regarding security. The limited attack surface, with only one shortcode and no unprotected entry points, further contributes to its perceived safety.

Key Concerns

  • No nonce checks
  • No capability checks
Vulnerabilities
None known

Alligator Popup Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Alligator Popup Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
5 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped5 total outputs
Attack Surface

Alligator Popup Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[popup] alligator-popup.php:104
WordPress Hooks 2
filterplugin_row_metaalligator-popup.php:39
actionwp_enqueue_scriptsalligator-popup.php:75
Maintenance & Trust

Alligator Popup Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedJun 23, 2025
PHP min version
Downloads72K

Community Trust

Rating98/100
Number of ratings45
Active installs2K
Developer Profile

Alligator Popup Developer Profile

cubecolour

17 plugins · 21K total installs

99
trust score
Avg Security Score
99/100
Avg Patch Time
7 days
View full developer profile
Detection Fingerprints

How We Detect Alligator Popup

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/alligator-popup/js/popup.js
Script Paths
/wp-content/plugins/alligator-popup/js/popup.js
Version Parameters
alligator-popup/js/popup.js?ver=2.0.0

HTML / DOM Fingerprints

CSS Classes
popup
Data Attributes
data-widthdata-heightdata-scrollbars
Shortcode Output
<a href="" class="popup" data-width="" data-height="" data-scrollbars="
FAQ

Frequently Asked Questions about Alligator Popup