Before Exit Popup Security & Risk Analysis

wordpress.org/plugins/before-exit-popup

Actually there is no way to find out when user will leave this site. Before Exit Popup tries to get user attention back to site by showing a popup whe …

0 active installs v1.0 PHP 5.2.4+ WP 3.0.1+ Updated May 14, 2018
exit-popuppopuprelated-posts
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Before Exit Popup Safe to Use in 2026?

Generally Safe

Score 85/100

Before Exit Popup has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7yr ago
Risk Assessment

The 'before-exit-popup' v1.0 plugin exhibits a generally strong security posture based on the provided static analysis. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events contributing to the attack surface is a significant strength. Furthermore, the code's adherence to using prepared statements for all SQL queries and the presence of a capability check are positive security indicators. The lack of identified dangerous functions, file operations, or external HTTP requests further bolsters its secure design.

Key Concerns

  • Output escaping is not fully implemented
  • No nonce checks found
Vulnerabilities
None known

Before Exit Popup Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Before Exit Popup Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
3
2 escaped
Nonce Checks
0
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

40% escaped5 total outputs
Attack Surface

Before Exit Popup Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 4
actionadmin_enqueue_scriptsbefore-exit-popup.php:49
actionwp_footerbefore-exit-popup.php:56
actionadmin_menubefore-exit-popup.php:60
actionwp_footerbefore-exit-popup.php:297
Maintenance & Trust

Before Exit Popup Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29
Last updatedMay 14, 2018
PHP min version5.2.4
Downloads1K

Community Trust

Rating100/100
Number of ratings2
Active installs0
Developer Profile

Before Exit Popup Developer Profile

Webgensis

7 plugins · 70 total installs

86
trust score
Avg Security Score
89/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Before Exit Popup

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/before-exit-popup/inc/admin/css/webgensis-exit-popup-admin.css/wp-content/plugins/before-exit-popup/inc/admin/js/webgensis-exit-popup-admin.js/wp-content/plugins/before-exit-popup/inc/css/before-exit-popup.css/wp-content/plugins/before-exit-popup/inc/js/before-exit-popup.js
Script Paths
/wp-content/plugins/before-exit-popup/inc/admin/js/webgensis-exit-popup-admin.js/wp-content/plugins/before-exit-popup/inc/js/before-exit-popup.js
Version Parameters
webgensis-exit-popup-admin.css?ver=webgensis-exit-popup-admin.js?ver=before-exit-popup.css?ver=before-exit-popup.js?ver=

HTML / DOM Fingerprints

CSS Classes
wrap
HTML Comments
Copyright 2016-2017 webgensis (email : info@webgensis.com) This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or+10 more
Data Attributes
webgensis_exit_popup_select_optionwebgensis_exit_popup_relative_posts_limitwebgensis_exit_popup_selected_posts
FAQ

Frequently Asked Questions about Before Exit Popup