PopBot – Create targeted pop-ups to convert your visitors Security & Risk Analysis

wordpress.org/plugins/popbot

Convert your users with targeted pop-ups. Use triggers & rules to nudge your users towards conversions when they\'re ready using the perfect …

0 active installs v1.0.3 PHP 7.4.0+ WP 5.7+ Updated Jan 17, 2023
chatboxconversioncropop-uppopup
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is PopBot – Create targeted pop-ups to convert your visitors Safe to Use in 2026?

Generally Safe

Score 85/100

PopBot – Create targeted pop-ups to convert your visitors has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3yr ago
Risk Assessment

The "popbot" v1.0.3 plugin exhibits a strong security posture based on the static analysis and vulnerability history provided. The plugin demonstrates excellent adherence to secure coding practices, with all SQL queries utilizing prepared statements, and an overwhelming majority of outputs being properly escaped. The presence of nonce and capability checks, along with no identified dangerous functions or file operations that raise immediate concerns, further bolsters its security. The absence of any recorded vulnerabilities in its history, including critical or high severity ones, suggests a well-maintained and secure codebase. The limited attack surface, consisting of a single shortcode entry point with no evident unauthenticated access, is a significant strength. While the analysis indicates a very low risk, the single file operation warrants a minor note, though its specific context is not detailed. Overall, "popbot" v1.0.3 appears to be a secure plugin with no immediate or apparent security risks.

Key Concerns

  • Single file operation without context
Vulnerabilities
None known

PopBot – Create targeted pop-ups to convert your visitors Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

PopBot – Create targeted pop-ups to convert your visitors Release Timeline

v1.0.3Current
v1.0.2
Code Analysis
Analyzed Apr 16, 2026

PopBot – Create targeted pop-ups to convert your visitors Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
5 prepared
Unescaped Output
2
146 escaped
Nonce Checks
1
Capability Checks
19
File Operations
1
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared5 total queries

Output Escaping

99% escaped148 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

1 flows
<templatePreview> (pages/templatePreview.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

PopBot – Create targeted pop-ups to convert your visitors Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[popbot] src/class-popbot.php:52
WordPress Hooks 24
filtershow_admin_barpages/templatePreview.php:9
actionrest_api_initpopbot.php:64
actionparse_requestpopbot.php:65
actionadmin_bar_menupopbot.php:66
actioninitpopbot.php:215
actionadmin_initsrc/class-admin-page.php:41
actionadmin_menusrc/class-admin-page.php:42
actionadmin_enqueue_scriptssrc/class-admin-page.php:43
actionadmin_footersrc/class-admin-page.php:100
actionadmin_footersrc/class-admin-page.php:128
actioninitsrc/class-custom-condition.php:95
actionwp_enqueue_scriptssrc/class-popbot-assets.php:18
actionadmin_enqueue_scriptssrc/class-popbot-assets.php:19
actionwp_enqueue_scriptssrc/class-popbot-assets.php:22
actionenqueue_block_editor_assetssrc/class-popbot-assets.php:23
filterscript_loader_tagsrc/class-popbot-assets.php:24
actionadmin_headsrc/class-popbot-assets.php:103
filteradmin_body_classsrc/class-popbot-assets.php:110
actionsave_postsrc/class-popbot-metabox.php:18
actionadd_meta_boxessrc/class-popbot-metabox.php:20
actioninitsrc/class-popbot.php:48
actionwp_body_opensrc/class-popbot.php:49
actionuse_block_editor_for_postsrc/class-popbot.php:50
filterpopbot_template_settingssrc/templating.php:27
Maintenance & Trust

PopBot – Create targeted pop-ups to convert your visitors Maintenance & Trust

Maintenance Signals

WordPress version tested6.1.10
Last updatedJan 17, 2023
PHP min version7.4.0
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

PopBot – Create targeted pop-ups to convert your visitors Developer Profile

WRD Studio

4 plugins · 30 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect PopBot – Create targeted pop-ups to convert your visitors

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/popbot/assets/css/popbot-admin.css/wp-content/plugins/popbot/assets/js/popbot-admin.js
Script Paths
/wp-content/plugins/popbot/assets/js/popbot-admin.js
Version Parameters
popbot/assets/css/popbot-admin.css?ver=popbot/assets/js/popbot-admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
popbot-debugger-opener
Data Attributes
data-popbot-slugdata-popbot-template
JS Globals
popbot_admin_params
REST Endpoints
/wp-json/popbot/v1/custom-conditions/wp-json/popbot/v1/analytics/wp-json/popbot/v1/options/wp-json/popbot/v1/templates/wp-json/popbot/v1/popbots
FAQ

Frequently Asked Questions about PopBot – Create targeted pop-ups to convert your visitors