Instant Popup Builder – Popup Maker for Videos, Forms, Offers, Announcements, Galleries & More Security & Risk Analysis
wordpress.org/plugins/instant-popup-builderLaunch professional, WordPress-native popups for offers, announcements and email signups without a hosted SaaS account or visitor limits.
Is Instant Popup Builder – Popup Maker for Videos, Forms, Offers, Announcements, Galleries & More Safe to Use in 2026?
Generally Safe
Score 99/100Instant Popup Builder – Popup Maker for Videos, Forms, Offers, Announcements, Galleries & More has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.
The "instant-popup-builder" plugin v1.1.8 exhibits a generally positive security posture with strong adherence to best practices in SQL query preparation and output escaping. The vast majority of SQL queries utilize prepared statements, and nearly all output is properly escaped, significantly reducing the risk of common web vulnerabilities like SQL injection and Cross-Site Scripting (XSS). The absence of known CVEs and common vulnerability types in its history further suggests a commitment to maintaining a secure codebase. However, the presence of 9 AJAX handlers without authentication checks represents a significant concern. While no critical taint flows were identified, 14 high-severity flows with unsanitized paths indicate potential weaknesses that could be exploited if an attacker can interact with these unprotected AJAX endpoints. The large number of AJAX handlers overall contributes to a considerable attack surface, and the unprotected subset amplifies this risk.
Key Concerns
- Unprotected AJAX handlers
- High severity unsanitized paths in taint analysis
Instant Popup Builder – Popup Maker for Videos, Forms, Offers, Announcements, Galleries & More Security Vulnerabilities
CVEs by Year
Severity Breakdown
1 total CVE
Instant Popup Builder <= 1.1.7 - Unauthenticated Arbitrary Shortcode Execution via 'token' Parameter
Instant Popup Builder – Popup Maker for Videos, Forms, Offers, Announcements, Galleries & More Release Timeline
Instant Popup Builder – Popup Maker for Videos, Forms, Offers, Announcements, Galleries & More Code Analysis
Bundled Libraries
SQL Query Safety
Output Escaping
Data Flow Analysis
Instant Popup Builder – Popup Maker for Videos, Forms, Offers, Announcements, Galleries & More Attack Surface
AJAX Handlers 44
Shortcodes 4
WordPress Hooks 31
Scheduled Events 1
Maintenance & Trust
Instant Popup Builder – Popup Maker for Videos, Forms, Offers, Announcements, Galleries & More Maintenance & Trust
Maintenance Signals
Community Trust
Instant Popup Builder – Popup Maker for Videos, Forms, Offers, Announcements, Galleries & More Alternatives
Popup Builder – Create highly converting, mobile friendly marketing popups.
popup-builder
Increase Sales, Lead Generation, Conversion rates and receive good Call to Action rates with smart WordPress popup plugin.
Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers
popup-builder-block
High-converting popup campaigns with PopupKit – advanced triggers, A/B testing, spin-to-win, multistep popups & 270+ popup templates for WordPress
WP Popups – WordPress Popup builder
wp-popups-lite
WP Popups is the best popup maker for WordPress. Easy but powerful plugin with display filters, scroll-triggered popups, and Gutenberg block editor.
CM Pop-Up – Create engaging popups to capture attention and boost interaction
cm-pop-up-banners
Create and customize popups. Display messages, Call to actions, promotions, or announcements to engage visitors and boost interaction.
WP Popup Builder – Popup Forms and Marketing Lead Generation
wp-popup-builder
WP Popup Builder is a powerful tool to create amazing popup for your site. Its drag and drop feature help to create form in very easy step without hav …
Instant Popup Builder – Popup Maker for Videos, Forms, Offers, Announcements, Galleries & More Developer Profile
1 plugin · 50 total installs
How We Detect Instant Popup Builder – Popup Maker for Videos, Forms, Offers, Announcements, Galleries & More
Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.
Asset Fingerprints
/wp-content/plugins/instant-popup-builder/css/base.css/wp-content/plugins/instant-popup-builder/css/notices.css/wp-content/plugins/instant-popup-builder/css/quill.snow.css/wp-content/plugins/instant-popup-builder/css/select2.css/wp-content/plugins/instant-popup-builder/css/fontawesome.css/wp-content/plugins/instant-popup-builder/css/modal.css/wp-content/plugins/instant-popup-builder/css/settings.css/wp-content/plugins/instant-popup-builder/js/ipb-admin-script.js+3 more/wp-content/plugins/instant-popup-builder/js/ipb-admin-script.js/wp-content/plugins/instant-popup-builder/js/ipb-builder-script.js/wp-content/plugins/instant-popup-builder/js/ipb-frontend-script.js/wp-content/plugins/instant-popup-builder/js/ipb-settings-script.jsinstant-popup-builder/css/base.css?ver=instant-popup-builder/css/notices.css?ver=instant-popup-builder/css/quill.snow.css?ver=instant-popup-builder/css/select2.css?ver=instant-popup-builder/css/fontawesome.css?ver=instant-popup-builder/css/modal.css?ver=instant-popup-builder/css/settings.css?ver=instant-popup-builder/js/ipb-admin-script.js?ver=instant-popup-builder/js/ipb-builder-script.js?ver=instant-popup-builder/js/ipb-frontend-script.js?ver=instant-popup-builder/js/ipb-settings-script.js?ver=HTML / DOM Fingerprints
ipb_modalipb_modal_wrapipb_modal_contentipb_popup_wrapperipb_builder_containeripb-sticky-bar<!-- IPB --><!-- END IPB --><!-- IPB START --><!-- IPB END -->data-ipb-iddata-ipb-settingsdata-ipb-popup-idipb_builder_varsipb_frontend_varsinstantPopupBuilderipb_settings_varsIPB_AJAX_URL/wp-json/instant-popup-builder/v1/popups/wp-json/instant-popup-builder/v1/popup//wp-json/instant-popup-builder/v1/settings[instant_popup]