Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder Security & Risk Analysis

Want to boost sales & marketing efforts? Use your favorite forms & builder. Unlimited popups & impressions, keep your data, no monthly subscription.

700K active installs v1.21.5 PHP 7.4+ WP 6.6+ Updated Oct 13, 2025

conversionmarketingoptinpopuppopups

A · Safe

CVEs total18

Unpatched0

Last CVESep 25, 2025

Plugin page Download

Safety Verdict

Is Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder Safe to Use in 2026?

Generally Safe

Score 91/100

Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder has a strong security track record. Known vulnerabilities have been patched promptly.

18 known CVEsLast CVE: Sep 25, 2025Updated 5mo ago

Risk Assessment

The 'popup-maker' plugin v1.21.5 exhibits a mixed security posture. On the positive side, it demonstrates strong adherence to secure coding practices with a high percentage of prepared SQL statements and properly escaped output. The presence of numerous capability checks and nonce verifications further suggests a conscious effort to implement security controls. However, a significant concern arises from the static analysis revealing 4 AJAX handlers without authentication checks, presenting a direct attack vector. Additionally, the taint analysis identified 2 high-severity flows, indicating potential vulnerabilities that could be exploited if not addressed. The plugin's historical vulnerability record is also a notable weakness, with 18 known CVEs, including 2 high-severity ones and a significant number of medium-severity issues, indicating a recurring pattern of security flaws. While there are currently no unpatched CVEs, this history suggests a need for continued vigilance and more robust security development practices. Overall, while the plugin employs several good security measures, the unprotected entry points and historical vulnerability trends warrant careful consideration and remediation.

Key Concerns

Unprotected AJAX handlers
High severity taint flows
Numerous historical medium severity CVEs (16)
Historical high severity CVEs (2)

Vulnerabilities

Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder Security Vulnerabilities

CVEs by Year

1 CVE in 2017

2017

2 CVEs in 2019

2019

4 CVEs in 2022

2022

3 CVEs in 2023

2023

5 CVEs in 2024

2024

3 CVEs in 2025

2025

Patched Has unpatched

Severity Breakdown

High

Medium

18 total CVEs

CVE-2025-9490medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Popup Maker <= 1.20.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameter

Sep 25, 2025 Patched in 1.21.0 (1d)

CVE-2025-4205medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Popup Maker <= 1.20.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via popupID Parameter

Jun 2, 2025 Patched in 1.20.5 (1d)

CVE-2025-24746medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Popup Maker <= 1.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Jan 24, 2025 Patched in 1.20.3 (5d)

CVE-2024-10583medium · 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder <= 1.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Dec 11, 2024 Patched in 1.20.3 (1d)

CVE-2024-47358medium · 5.3Missing Authorization

Popup Maker <= 1.19.2 - Missing Authorization

Sep 30, 2024 Patched in 1.20.0 (11d)

CVE-2024-7054medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Popup Maker <= 1.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Aug 19, 2024 Patched in 1.19.1 (1d)

CVE-2024-5561medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Popup Maker <= 1.19.0 - Authenticated (Admin+) Stored Cross-Site Scripting

Aug 19, 2024 Patched in 1.19.1 (33d)

CVE-2024-2336medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Popup Maker – Popup for opt-ins, lead gen, & more <= 1.18.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Mar 20, 2024 Patched in 1.18.3 (73d)

CVE-2022-47597medium · 5.3Exposure of Sensitive Information to an Unauthorized Actor

Popup Maker <= 1.17.1 - Sensitive Data Exposure via debug log file

Mar 14, 2023 Patched in 1.18.0 (315d)

CVE-2022-45819medium · 5.4Missing Authorization

Popup Maker <= 1.17.1 - Missing Authorization via save_popup_enabled_state

Mar 9, 2023 Patched in 1.18.0 (320d)

WF-533f71d5-823d-45eb-8ecf-76afafd2a5d3-popup-makermedium · 4.3Cross-Site Request Forgery (CSRF)

Popup Maker <= 1.18.0 - Cross-Site Request Forgery via init

Mar 8, 2023 Patched in 1.18.1 (321d)

CVE-2022-3690medium · 5.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Popup Maker <= 1.16.10 - Authenticated (Administrator+) Stored Cross-Site Scripting

Oct 31, 2022 Patched in 1.16.11 (449d)

CVE-2022-4381medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Popup Maker <= 1.16.8 - Authenticated (Contributor+) Cross-Site Scripting

Sep 26, 2022 Patched in 1.16.9 (484d)

CVE-2022-4362medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Popup Maker <= 1.16.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Sep 23, 2022 Patched in 1.16.9 (487d)

CVE-2022-1104medium · 5.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Popup Maker <= 1.16.4 - Authenticated (Admin+) Cross-Site Scripting

Apr 19, 2022 Patched in 1.16.5 (644d)

CVE-2019-17574high · 7.5Improper Authentication

Popup-Maker <= 1.8.12 - Unauthenticated information disclosure

Oct 14, 2019 Patched in 1.8.13 (1562d)

WF-3fda31fa-efc9-44b9-99ba-9e3e23aa2ee0-popup-makerhigh · 8.8Missing Authorization

Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update

Feb 25, 2019 Patched in 1.8.3 (1793d)

CVE-2017-2284medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Popup Maker < 1.6.5 - Reflected Cross-Site Scripting

Jul 24, 2017 Patched in 1.6.5 (2374d)

Code Analysis

Analyzed Mar 16, 2026

Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder Code Analysis

Dangerous Functions

Raw SQL Queries

70 prepared

Unescaped Output

964 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

81% prepared86 total queries

Output Escaping

93% escaped1038 total outputs

Data Flows

4 unsanitized

Data Flow Analysis

14 flows4 with unsanitized paths

object_search (classes\Admin\Ajax.php:90)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

4 unprotected

Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder Attack Surface

Entry Points13

Unprotected4

AJAX Handlers 13

authwp_ajax_pum_object_searchclasses\Admin\Ajax.php:24

authwp_ajax_pum_process_batch_requestclasses\Admin\Ajax.php:25

authwp_ajax_pum_save_enabled_stateclasses\Admin\Ajax.php:26

authwp_ajax_pum_do_shortcodeclasses\Admin\Shortcode\UI.php:73

authwp_ajax_pum_analyticsclasses\Analytics.php:27

noprivwp_ajax_pum_analyticsclasses\Analytics.php:28

authwp_ajax_pum_check_license_statusclasses\Controllers\RestAPI.php:44

authwp_ajax_pum_sub_formclasses\Newsletters.php:58

noprivwp_ajax_pum_sub_formclasses\Newsletters.php:59

authwp_ajax_pum_alerts_actionclasses\Utils\Alerts.php:26

authwp_ajax_pum_process_upgrade_requestclasses\Utils\Upgrades.php:102

authwp_ajax_pum_trigger_upgradesincludes\admin\class-pum-admin-upgrades.php:67

authwp_ajax_pum_review_actionincludes\modules\reviews.php:32

WordPress Hooks 362

actionplugins_loadedbootstrap.legacy.php:135

actionplugins_loadedbootstrap.php:168

filterpum_settings_fieldsclasses\Abstract\Provider.php:61

filterpum_settings_tab_sectionsclasses\Abstract\Provider.php:62

filterpum_sub_form_shortcode_tabsclasses\Abstract\Provider.php:72

filterpum_sub_form_shortcode_subtabsclasses\Abstract\Provider.php:73

filterpum_sub_form_shortcode_fieldsclasses\Abstract\Provider.php:74

filterpum_sub_form_shortcode_defaultsclasses\Abstract\Provider.php:75

filterpum_sub_form_sanitizationclasses\Abstract\Provider.php:78

filterpum_sub_form_validationclasses\Abstract\Provider.php:79

actionpum_sub_form_submissionclasses\Abstract\Provider.php:80

actionpum_sub_form_fieldsclasses\Abstract\Provider.php:83

actionadmin_enqueue_scriptsclasses\Admin\Assets.php:47

actionadmin_print_footer_scriptsclasses\Admin\Assets.php:48

actionadmin_enqueue_scriptsclasses\Admin\Assets.php:49

actionadmin_enqueue_scriptsclasses\Admin\Assets.php:51

filterblock_categories_allclasses\Admin\BlockEditor.php:24

actionenqueue_block_editor_assetsclasses\Admin\BlockEditor.php:33

actionenqueue_block_editor_assetsclasses\Admin\BlockEditor.php:34

actionenqueue_block_assetsclasses\Admin\BlockEditor.php:35

actionwp_loadedclasses\Admin\BlockEditor.php:36

filterpum_alert_listclasses\Admin\Notices.php:25

filterpum_alert_listclasses\Admin\Notices.php:26

filterpum_alert_listclasses\Admin\Notices.php:27

actionpum_alert_dismissedclasses\Admin\Notices.php:28

filterpum_alert_listclasses\Admin\Notices.php:29

actionadmin_print_footer_scriptsclasses\Admin\Notices.php:379

filterpum_alert_listclasses\Admin\Onboarding.php:25

actionpum_alert_dismissedclasses\Admin\Onboarding.php:26

filterpum_admin_pointers-popupclasses\Admin\Onboarding.php:28

filterpum_admin_pointers-edit-popupclasses\Admin\Onboarding.php:29

actionadmin_enqueue_scriptsclasses\Admin\Onboarding.php:30

actionadmin_initclasses\Admin\Onboarding.php:32

actionadmin_menuclasses\Admin\Onboarding.php:37

actionadmin_menuclasses\Admin\Pages.php:31

actionadmin_headclasses\Admin\Pages.php:32

actionedit_form_topclasses\Admin\Popups.php:28

filterenter_title_hereclasses\Admin\Popups.php:31

actionedit_form_advancedclasses\Admin\Popups.php:34

actionedit_form_before_permalinkclasses\Admin\Popups.php:37

actionadd_meta_boxesclasses\Admin\Popups.php:40

actionsave_postclasses\Admin\Popups.php:43

filterwp_insert_post_dataclasses\Admin\Popups.php:46

filtermanage_edit-popup_columnsclasses\Admin\Popups.php:49

actionmanage_posts_custom_columnclasses\Admin\Popups.php:50

filtermanage_edit-popup_sortable_columnsclasses\Admin\Popups.php:51

filterdefault_hidden_columnsclasses\Admin\Popups.php:52

actionload-edit.phpclasses\Admin\Popups.php:53

actionrestrict_manage_postsclasses\Admin\Popups.php:54

filterpost_row_actionsclasses\Admin\Popups.php:55

actionpost_submitbox_misc_actionsclasses\Admin\Popups.php:57

filtermce_buttons_2classes\Admin\Popups.php:59

filtertiny_mce_before_initclasses\Admin\Popups.php:60

filterrequestclasses\Admin\Popups.php:1426

actionadmin_noticesclasses\Admin\Settings.php:27

actionadmin_initclasses\Admin\Settings.php:28

actionpum_save_settingsclasses\Admin\Settings.php:29

actionadmin_initclasses\Admin\Shortcode\UI.php:35

filtermce_buttonsclasses\Admin\Shortcode\UI.php:66

filtermce_external_pluginsclasses\Admin\Shortcode\UI.php:67

actionadmin_enqueue_scriptsclasses\Admin\Shortcode\UI.php:88

actionadmin_menuclasses\Admin\Subscribers.php:22

filterset-screen-optionclasses\Admin\Subscribers.php:23

actionadmin_footerclasses\Admin\Templates.php:27

actionadd_meta_boxesclasses\Admin\Themes.php:23

actionsave_postclasses\Admin\Themes.php:26

actionadmin_noticesclasses\Admin\Tools.php:27

actionadmin_initclasses\Admin\Tools.php:28

actionpum_tools_page_tab_betasclasses\Admin\Tools.php:29

actionpum_tools_page_tab_error_logclasses\Admin\Tools.php:30

actionpum_tools_page_tab_action_schedulerclasses\Admin\Tools.php:31

actionpum_tools_page_tab_importclasses\Admin\Tools.php:32

actionpum_save_enabled_betasclasses\Admin\Tools.php:33

actionpum_empty_error_logclasses\Admin\Tools.php:34

filteruser_has_capclasses\Admin.php:26

actionadmin_initclasses\Admin.php:27

actionadmin_headclasses\Admin.php:28

actionrest_api_initclasses\Analytics.php:26

filterpum_varsclasses\Analytics.php:29

actionpum_extension_updatedclasses\AssetCache.php:91

actionpum_extension_deactivatedclasses\AssetCache.php:92

actionpum_extension_activatedclasses\AssetCache.php:93

actionpum_regenerate_asset_cacheclasses\AssetCache.php:94

actionpum_save_settingsclasses\AssetCache.php:95

actionpum_save_popupclasses\AssetCache.php:96

actionpum_save_themeclasses\AssetCache.php:97

actionpum_update_core_versionclasses\AssetCache.php:98

actionpum_update_core_versionclasses\AssetCache.php:100

actioninitclasses\AssetCache.php:103

filterpum_alert_listclasses\AssetCache.php:106

actionpum_stylesclasses\AssetCache.php:108

actioninitclasses\AssetCache.php:117

actionwp_enqueue_scriptsclasses\AssetCache.php:121

actionwp_enqueue_scriptsclasses\AssetCache.php:126

actionadmin_enqueue_scriptsclasses\AssetCache.php:131

actionadmin_enqueue_scriptsclasses\AssetCache.php:137

actionwp_print_scriptsclasses\AssetCache.php:141

filterpum_generated_jsclasses\AssetCache.php:922

filterpum_generated_cssclasses\AssetCache.php:966

actionadmin_menuclasses\Controllers\Admin\CallToActions.php:28

actionadmin_enqueue_scriptsclasses\Controllers\Admin\CallToActions.php:29

actionadmin_bar_menuclasses\Controllers\Admin\Toolbar.php:27

actionwp_enqueue_scriptsclasses\Controllers\Admin\Toolbar.php:28

actioninitclasses\Controllers\Admin\Toolbar.php:29

filterplugin_action_linksclasses\Controllers\Admin\WP\PluginsPage.php:37

filternetwork_admin_plugin_action_linksclasses\Controllers\Admin\WP\PluginsPage.php:38

filterplugin_row_metaclasses\Controllers\Admin\WP\PluginsPage.php:39

filternetwork_admin_plugin_row_metaclasses\Controllers\Admin\WP\PluginsPage.php:40

actionadmin_print_footer_scriptsclasses\Controllers\Admin\WP\PluginsPage.php:41

actionadmin_enqueue_scriptsclasses\Controllers\Admin.php:32

actionwp_enqueue_scriptsclasses\Controllers\Assets.php:34

actionadmin_enqueue_scriptsclasses\Controllers\Assets.php:35

actionenqueue_block_editor_assetsclasses\Controllers\Assets.php:36

actionwp_print_scriptsclasses\Controllers\Assets.php:38

actionadmin_print_scriptsclasses\Controllers\Assets.php:39

actionwp_enqueue_scriptsclasses\Controllers\Assets.php:42

actionwp_footerclasses\Controllers\Assets.php:43

actionadmin_footerclasses\Controllers\Assets.php:44

actiontemplate_redirectclasses\Controllers\CallToActions.php:27

actionpopup_maker/cta_conversionclasses\Controllers\CallToActions.php:28

filterpopup_maker/popup_post_type_argsclasses\Controllers\Compatibility\Backcompat\Filters.php:28

filterpopup_maker/popup_theme_post_type_argsclasses\Controllers\Compatibility\Backcompat\Filters.php:29

filterpopup_maker/popup_category_tax_argsclasses\Controllers\Compatibility\Backcompat\Filters.php:30

filterpopup_maker/popup_tag_tax_argsclasses\Controllers\Compatibility\Backcompat\Filters.php:31

filterpopup_maker/post_type_labelsclasses\Controllers\Compatibility\Backcompat\Filters.php:32

filterpopup_maker/popup_post_type_argsclasses\Controllers\Compatibility\Builder\Divi.php:43

filteret_builder_post_typesclasses\Controllers\Compatibility\Builder\Divi.php:46

filteret_fb_is_enabledclasses\Controllers\Compatibility\Builder\Divi.php:49

filteret_builder_enabled_builder_post_typesclasses\Controllers\Compatibility\Builder\Divi.php:52

filterpopup_maker/popup_post_type_argsclasses\Controllers\Compatibility\SEO\Yoast.php:37

filterwpseo_accessible_post_typesclasses\Controllers\Compatibility\SEO\Yoast.php:38

actionadmin_headclasses\Controllers\Debug.php:34

actionwp_enqueue_scriptsclasses\Controllers\Frontend\Popups.php:90

filterthe_contentclasses\Controllers\Frontend\Popups.php:93

actionwp_footerclasses\Controllers\Frontend\Popups.php:96

actioninitclasses\Controllers\PostTypes.php:28

actionsave_post_popupclasses\Controllers\PostTypes.php:29

filterpost_updated_messagesclasses\Controllers\PostTypes.php:30

filteruse_block_editor_for_post_typeclasses\Controllers\PostTypes.php:33

actionreplace_editorclasses\Controllers\PostTypes.php:35

actioninitclasses\Controllers\RestAPI.php:31

actioninitclasses\Controllers\RestAPI.php:32

actionrest_api_initclasses\Controllers\RestAPI.php:35

actionrest_api_initclasses\Controllers\RestAPI.php:38

filterrest_pre_dispatchclasses\Controllers\RestAPI.php:41

filterpopup_maker/sanitize_call_to_action_settingsclasses\Controllers\RestAPI.php:49

filterpopup_maker/validate_call_to_action_settingsclasses\Controllers\RestAPI.php:50

actionpum_update_core_versionclasses\Controllers\Upgrades.php:27

actioninitclasses\Controllers\WP\Blocks.php:27

actionwp_dashboard_setupclasses\Controllers\WP\Dashboard.php:30

actionadmin_enqueue_scriptsclasses\Controllers\WP\Dashboard.php:32

actioninitclasses\Controllers\WP\I18n.php:27

actionadmin_noticesclasses\Extension\Activator.php:142

filterpum_enabled_extensionsclasses\Extension\Activator.php:159

filterpum_settings_fieldsclasses\Extension\License.php:141

actionadmin_initclasses\Extension\License.php:144

actionadmin_initclasses\Extension\License.php:147

actionpopmake_weekly_scheduled_eventsclasses\Extension\License.php:150

actionadmin_initclasses\Extension\License.php:156

filterpum_alert_listclasses\Extension\License.php:162

filterpum_beta_enabled_extensionsclasses\Extension\License.php:167

filterpre_set_site_transient_update_pluginsclasses\Extension\Updater.php:130

filterplugins_apiclasses\Extension\Updater.php:131

actionafter_plugin_rowclasses\Extension\Updater.php:132

actionadmin_initclasses\Extension\Updater.php:133

actioninitclasses\Extensions.php:30

actionupgrader_process_completeclasses\Extensions.php:31

filterpopmake_popup_post_type_argsclasses\Integration\Builder\Bricks.php:42

filterpum_popup_contentclasses\Integration\Builder\Bricks.php:43

filtertemplate_includeclasses\Integration\Builder\Bricks.php:44

filterpum_theme_css_selectorclasses\Integration\Builder\Bricks.php:45

actionwp_print_footer_scriptsclasses\Integration\Builder\Bricks.php:46

filterpopmake_get_optionclasses\Integration\Builder\Bricks.php:47

actionupdated_post_metaclasses\Integration\Form\BricksBuilder.php:21

actionadded_post_metaclasses\Integration\Form\BricksBuilder.php:22

actiondeleted_post_metaclasses\Integration\Form\BricksBuilder.php:23

actionwp_trash_postclasses\Integration\Form\BricksBuilder.php:24

actionuntrash_postclasses\Integration\Form\BricksBuilder.php:25

actioncaldera_forms_submit_completeclasses\Integration\Form\CalderaForms.php:17

actionwpcf7_mail_sentclasses\Integration\Form\ContactForm7.php:24

actionfluentform/before_submission_confirmationclasses\Integration\Form\FluentForms.php:24

actionfrm_after_create_entryclasses\Integration\Form\FormidableForms.php:29

actiongform_after_submissionclasses\Integration\Form\GravityForms.php:17

actionninja_forms_pre_processclasses\Integration\Form\NinjaForms.php:17

actionninja_forms_after_submissionclasses\Integration\Form\NinjaForms.php:18

actionwpforms_process_completeclasses\Integration\Form\WPForms.php:17

actionwsf_submit_post_completeclasses\Integration\Form\WSForms.php:24

filterpum_theme_font_family_optionsclasses\Integration\GoogleFonts.php:22

filterqm/output/menusclasses\Integration\QueryMonitor\Output\Html\CacheFunc.php:24

filterpum_settings_fieldsclasses\Integrations.php:60

actionpum_preload_popupclasses\Integrations.php:61

filterpum_registered_conditionsclasses\Integrations.php:62

filterpum_varsclasses\Integrations.php:64

actioninitclasses\Integrations.php:66

actionadmin_initclasses\Integrations.php:67

filterpum_popup_post_type_argsclasses\Integrations.php:68

filterpum_generated_jsclasses\Integrations.php:69

filterpum_generated_cssclasses\Integrations.php:70

filterpum_popup_settingsclasses\Integrations.php:71

filtervc_role_access_with_post_types_get_stateclasses\Integrations.php:255

filtervc_role_access_with_backend_editor_get_stateclasses\Integrations.php:256

filtervc_role_access_with_frontend_editor_get_stateclasses\Integrations.php:257

filtervc_check_post_type_validationclasses\Integrations.php:258

actionadmin_footerclasses\ListTable.php:166

filterpum_settings_fieldsclasses\Newsletter\Provider.php:25

actionplugins_loadedclasses\Newsletters.php:27

filterpum_sub_form_sanitizationclasses\Newsletters.php:61

filterpum_sub_form_validationclasses\Newsletters.php:62

actionpum_sub_form_successclasses\Newsletters.php:63

actiontemplate_redirectclasses\Previews.php:23

filterpum_popup_is_loadableclasses\Previews.php:24

filterpum_popup_data_attrclasses\Previews.php:25

filterpum_popup_get_public_settingsclasses\Previews.php:26

filterwp_privacy_personal_data_exportersclasses\Privacy.php:20

filterwp_privacy_personal_data_erasersclasses\Privacy.php:21

actionadmin_initclasses\Privacy.php:22

actionpum_save_popupclasses\Privacy.php:23

actioninitclasses\Services\License.php:91

actionpopup_maker_license_status_checkclasses\Services\License.php:92

actionadmin_initclasses\Services\License.php:93

filterpum_settings_editor_argsclasses\Services\License.php:94

actionshutdownclasses\Services\Logging.php:70

filterpre_site_transient_update_pluginsclasses\Services\Upgrader.php:150

actioninitclasses\Shortcode.php:79

actionadmin_headclasses\Shortcode.php:81

actionprint_media_templatesclasses\Shortcode.php:92

actionregister_shortcode_uiclasses\Shortcode.php:93

actionwp_enqueue_scriptsclasses\Site\Assets.php:67

actionwp_enqueue_scriptsclasses\Site\Assets.php:68

actionwp_footerclasses\Site\Assets.php:71

actionpum_preload_popupclasses\Site\Assets.php:74

filterwp_enqueue_scriptsclasses\Site\Assets.php:75

actionwp_headclasses\Site\Assets.php:80

actioninitclasses\Site.php:21

filterpum_popup_contentclasses\Site.php:37

filterpum_popup_contentclasses\Site.php:38

filterpum_popup_contentclasses\Site.php:59

filterpum_popup_contentclasses\Site.php:61

filterpum_popup_contentclasses\Site.php:62

filterpum_popup_contentclasses\Site.php:63

filterpum_popup_contentclasses\Site.php:64

filterpum_popup_contentclasses\Site.php:65

filterpum_popup_contentclasses\Site.php:67

filterpum_popup_contentclasses\Site.php:69

filterpum_popup_contentclasses\Site.php:81

filterpum_popup_contentclasses\Site.php:105

filterpum_popup_contentclasses\Site.php:126

actionpum_daily_scheduled_eventsclasses\Telemetry.php:27

filterpum_alert_listclasses\Telemetry.php:29

actionpum_alert_dismissedclasses\Telemetry.php:30

actioninitclasses\Upgrade\Registry.php:48

filterviews_edit-popupclasses\Upsell.php:19

filterviews_edit-popup_themeclasses\Upsell.php:20

filterpum_popup_settings_fieldsclasses\Upsell.php:21

filterpum_theme_settings_fieldsclasses\Upsell.php:22

actionin_admin_headerclasses\Upsell.php:23

actionadmin_initclasses\Utils\Alerts.php:24

actionadmin_initclasses\Utils\Alerts.php:25

filterpum_alert_listclasses\Utils\Alerts.php:27

filterpum_alert_listclasses\Utils\Alerts.php:28

filterpum_alert_listclasses\Utils\Alerts.php:29

actionadmin_menuclasses\Utils\Alerts.php:30

actionadmin_noticesclasses\Utils\Alerts.php:407

actionnetwork_admin_noticesclasses\Utils\Alerts.php:408

actionuser_admin_noticesclasses\Utils\Alerts.php:409

filtersafe_style_cssclasses\Utils\Alerts.php:585

filtercron_schedulesclasses\Utils\Cron.php:28

actionwpclasses\Utils\Cron.php:29

actionshutdownclasses\Utils\Logging.php:82

actionadmin_noticesclasses\Utils\Prerequisites.php:108

filterpum_alert_listclasses\Utils\Upgrades.php:96

filterpum_tools_tabsclasses\Utils\Upgrades.php:98

actionpum_tools_page_tab_upgradesclasses\Utils\Upgrades.php:100

actionpum_register_upgradesclasses\Utils\Upgrades.php:104

actionadmin_menuincludes\admin\class-pum-admin-upgrades.php:62

actionnetwork_admin_menuincludes\admin\class-pum-admin-upgrades.php:63

actionadmin_initincludes\admin\class-pum-admin-upgrades.php:65

actionadmin_noticesincludes\admin\class-pum-admin-upgrades.php:68

actionpum_save_themeincludes\functions\general.php:112

actionpum_popup_passive_migration_2includes\functions\popups\migrations.php:273

actionpum_theme_passive_migration_1includes\functions\themes\migrations.php:83

actionpum_theme_passive_migration_2includes\functions\themes\migrations.php:148

filterpum_registered_conditionsincludes\integrations\class-pum-buddypress-integration.php:23

filterpum_condition_sort_orderincludes\integrations\class-pum-buddypress-integration.php:24

filterpum_get_cookiesincludes\integrations\class-pum-cf7.php:22

filterwpcf7_editor_panelsincludes\integrations\class-pum-cf7.php:23

actionwpcf7_after_saveincludes\integrations\class-pum-cf7.php:24

filterwpcf7_form_elementsincludes\integrations\class-pum-cf7.php:25

actionpopmake_preload_popupincludes\integrations\class-pum-cf7.php:26

filtergform_form_settings_menuincludes\integrations\class-pum-gravity-forms.php:12

actiongform_form_settings_page_popup-makerincludes\integrations\class-pum-gravity-forms.php:13

filterpum_get_cookiesincludes\integrations\class-pum-gravity-forms.php:14

filtergform_get_form_filterincludes\integrations\class-pum-gravity-forms.php:15

actionpopmake_preload_popupincludes\integrations\class-pum-gravity-forms.php:16

actionpopmake_popup_before_innerincludes\integrations\class-pum-gravity-forms.php:17

actionpopmake_popup_after_innerincludes\integrations\class-pum-gravity-forms.php:18

filtershortcode_atts_gravityformsincludes\integrations\class-pum-gravity-forms.php:23

filterpum_registered_cookiesincludes\integrations\class-pum-ninja-forms.php:71

actioninitincludes\integrations\class-pum-ninja-forms.php:181

filterpum_registered_conditionsincludes\integrations\class-pum-woocommerce-integration.php:20

filterpum_condition_sort_orderincludes\integrations\class-pum-woocommerce-integration.php:21

actionicl_make_duplicateincludes\integrations\class-pum-wpml.php:23

filterpum_popup_get_displayincludes\integrations\class-pum-wpml.php:30

filterpum_popup_get_closeincludes\integrations\class-pum-wpml.php:31

filterpum_popup_get_triggersincludes\integrations\class-pum-wpml.php:32

filterpum_popup_get_cookiesincludes\integrations\class-pum-wpml.php:33

filterpum_popup_get_conditionsincludes\integrations\class-pum-wpml.php:34

filterpum_popup_get_theme_idincludes\integrations\class-pum-wpml.php:35

filterpum_popup_mobile_disabledincludes\integrations\class-pum-wpml.php:36

filterpum_popup_tablet_disabledincludes\integrations\class-pum-wpml.php:37

filterpum_popupincludes\integrations\class-pum-wpml.php:50

filterpum_popup_mobile_disabledincludes\integrations\class-pum-wpml.php:118

filterpum_popup_tablet_disabledincludes\integrations\class-pum-wpml.php:134

filterpum_popup_get_triggersincludes\integrations\class-pum-wpml.php:150

filterpum_popup_get_displayincludes\integrations\class-pum-wpml.php:166

filterpum_popup_get_closeincludes\integrations\class-pum-wpml.php:182

filterpum_popup_get_cookiesincludes\integrations\class-pum-wpml.php:198

filterpum_popup_get_theme_idincludes\integrations\class-pum-wpml.php:214

filterpum_popup_get_conditionsincludes\integrations\class-pum-wpml.php:309

actioninitincludes\integrations.php:52

filterpopmake_popup_display_defaultsincludes\legacy\defaults.php:14

filterpum_popup_display_defaultsincludes\legacy\defaults.php:15

filterpopmake_popup_close_defaultsincludes\legacy\defaults.php:59

filterpum_popup_close_defaultsincludes\legacy\defaults.php:60

actionpopmake_preload_popupincludes\legacy\deprecated-filters.php:37

filterpum_sanitize_settingsincludes\legacy\deprecated-filters.php:63

filterpum_popup_contentincludes\legacy\deprecated-filters.php:91

filterpum_popup_data_attrincludes\legacy\deprecated-filters.php:119

filterpum_popup_classesincludes\legacy\deprecated-filters.php:147

filterpum_popup_data_attrincludes\legacy\deprecated-filters.php:175

filterpum_settings_fieldsincludes\legacy\functions-backcompat.php:14

filterpum_popup_data_attrincludes\legacy\importer\easy-modal-v2.php:220

filterpopmake_shortcode_popup_default_attsincludes\legacy\importer\easy-modal-v2.php:221

filterpopmake_shortcode_data_attrincludes\legacy\importer\easy-modal-v2.php:222

filterpum_popup_is_loadableincludes\legacy\importer\easy-modal-v2.php:224

actioninitincludes\legacy\importer\easy-modal-v2.php:228

filterpopmake_size_unit_optionsincludes\legacy\input-options.php:16

filterpopmake_font_style_optionsincludes\legacy\input-options.php:32

filterpopmake_text_align_optionsincludes\legacy\input-options.php:44

filterpopmake_popup_display_size_optionsincludes\legacy\input-options.php:57

filterpopmake_popup_display_animation_type_optionsincludes\legacy\input-options.php:80

filterpopmake_popup_display_animation_origin_optionsincludes\legacy\input-options.php:97

filterpopmake_popup_display_location_optionsincludes\legacy\input-options.php:121

filterpopmake_theme_close_location_optionsincludes\legacy\input-options.php:141

filterpopmake_cookie_trigger_optionsincludes\legacy\input-options.php:156

filterpopmake_settings_miscincludes\modules\menus.php:25

filterwp_setup_nav_menu_itemincludes\modules\menus.php:32

filterwp_edit_nav_menu_walkerincludes\modules\menus.php:34

actionwp_nav_menu_item_custom_fieldsincludes\modules\menus.php:36

actionwp_update_nav_menu_itemincludes\modules\menus.php:37

filtermanage_nav-menus_columnsincludes\modules\menus.php:38

filterpum_alert_listincludes\modules\reviews.php:31

actionplugins_loadedincludes\namespaced\cacheit.php:154

filterqm/outputter/htmlincludes\namespaced\cacheit.php:160

actionplugins_loadedincludes\namespaced\cacheit.php:177

filterallowed_redirect_hostsincludes\namespaced\utils.php:134

actionwp_loadedincludes\pum-install-functions.php:130

actionpum_update_core_versionincludes\pum-install-functions.php:133

actionadmin_noticesincludes\pum-sdk\class-pum-extension-activation.php:105

actionadmin_noticespopup-maker.php:100

actionadmin_noticesvendor-prefixed\code-atlantic\prerequisite-checks\src\Prerequisites.php:148

actionadmin_noticesvendor-prefixed\code-atlantic\wp-autoloader\src\Autoloader.php:67

Scheduled Events 3

popup_maker_license_status_check

pum_weekly_scheduled_events

pum_daily_scheduled_events

Maintenance & Trust

Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5

Last updatedOct 13, 2025

PHP min version7.4

Downloads19.8M

Community Trust

Rating98/100

Number of ratings4,495

Active installs700K

Alternatives

Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder Alternatives

Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation

optinmonster

🤩 Make popups & optin forms to get more email newsletter subscribers, leads, and sales - #1 most popular popup builder plugin! 🚀

1.0M 6 CVEs

Advanced Popups

advanced-popups

100

Display high-converting newsletter popups, a cookie notice, or a notification with the light-weight yet feature-rich plugin.

70K 1 CVE

HollerBox — Fast & Effective Popups & Lead-Generation

holler-box

Get more leads and sales with effective popups that convert! Integrate HollerBox with your favorite CRM and email marketing tools.

3K 2 CVEs

SendPulse – Popup Builder for Email Optins, Lead Generation, Sticky Bars and Videos

sendpulse-popups

100

SendPulse Pop-ups plugin for WordPress. Create highly converting and mobile-friendly pop-ups, opt-in forms, exit popups, sticky bars, NPS surveys, etc

100 No CVEs

Epic Popup Creator

epic-popup-creator

An easy to use and light plugin for creating popup with user friendly interface.

0 No CVEs

Developer Profile

Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder Developer Profile

Daniel Iser

7 plugins · 828K total installs

trust score

Avg Security Score

84/100

Avg Patch Time

588 days

View full developer profile

Detection Fingerprints

How We Detect Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

FAQ