PLUGIN SECURITY
Is Advanced Popups safe?
Display high-converting newsletter popups, a cookie notice, or a notification with the light-weight yet feature-rich plugin.
What this plugin does
- Slug:
advanced-popups - Author: codesupplyco
- 60000+ active installs
- 80/100 rating (9 reviews on wordpress.org)
- 715425 all-time downloads
- On WordPress.org since 2019-10-31
advertisingmarketingOptinpopuppopups
Maintenance status
- Latest known version: 1.2.4
- Last updated: 2026-07-11 4:11pm GMT
- Tested up to WordPress: 7.0.4
- Requires PHP: 5.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
6 known CVEs on file for Advanced Popups. Reported between 2020 and 2023.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2021-4342 | Advanced Popups [advanced-popups] < 1.1.2 | — | Unknown | < 1.1.2 | 1.1.2 | 2023-06-07 | ✓ fixed in latest |
| — | Advanced Popups [advanced-popups] < 1.1.2 | — | Unknown | < 1.1.2 | 1.1.2 | 2021-06-21 | ✓ fixed in latest |
| CVE-2021-4421 | Advanced Popups [advanced-popups] < 1.1.2 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 1.1.2 | 1.1.2 | 2020-06-21 | ✓ fixed in latest |
| — | Advanced Popups [advanced-popups] < 1.1.2 | — | Unknown | < 1.1.2 | 1.1.2 | — | ✓ fixed in latest |
| — | Advanced Popups [advanced-popups] < 1.1.2 | — | Unknown | < 1.1.2 | 1.1.2 | — | ✓ fixed in latest |
| CVE-2021-4416, CVE-2021-4415, CVE-2021-4408, CVE-2021-4421, CVE-2021-4426 | CSRF Bypass in Multiple Plugins | — | Unknown | < 1.1.2 | 1.1.2 | — | ✓ fixed in latest |
How to fix it
Keep Advanced Popups updated — 1.2.4 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Hostinger Reach – AI-Powered Email Marketing for WordPress — 1000000+ active installs — 100/100 (6) — max PHP 8.4
- Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation — 1000000+ active installs — 86/100 (815) — max PHP 8.4
- Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder — 700000+ active installs — 98/100 (4503) — max PHP 8.4
- Pinterest for WooCommerce — 300000+ active installs — 46/100 (68) — max PHP 8.4
- HubSpot All-In-One Marketing – Forms, Popups, Live Chat — 200000+ active installs — 86/100 (207) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.