| #1 | ActiveDEMAND | 32 | 157 | 161 | 1k+ | | | Output is not escaped |
| #2 | Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers | 83 | 2 | 73 | 60k+ | | | Direct Query |
| #3 | Boxzilla – WordPress Popup Builder | 79 | 4 | 64 | 20k+ | | | Non-prefixed global variable |
| #4 | Promolayer – Popup Builder & Abandonment Preventer | 99 | 2 | 0 | 1k+ | | | Non Enqueued Script |
| #5 | Claspo – Popups, Spin the Wheel & Email Capture | 78 | 107 | 16 | 1k+ | | | wp function not compatible with requires wp |
| #6 | Getsitecontrol — Email Marketing Plugin | Popup Maker, Automations & Newsletters | 72 | 17 | 11 | 1k+ | | | wp function not compatible with requires wp |
| #7 | Poptics – Popup Builder, Email Opt-ins, Exit-Intent & WooCommerce Popups Sales | 37 | 59 | 64 | 2k+ | | | SQL query is not prepared |
| #8 | Modal Popup Box — Popup Maker & Popup Builder | 93 | 1 | 3 | 2k+ | | | Input is not sanitized |
| #9 | WP Popup Builder – Popup Forms and Marketing Lead Generation | 34 | 357 | 143 | 3k+ | | | Text Domain Mismatch |
| #10 | Hello Bar Popup Builder | 94 | 2 | 0 | 3k+ | | | Non Enqueued Script |
| #11 | AI Popup Builder & Popup Maker by OptiMonk | 35 | 81 | 65 | 4k+ | | | Text Domain Mismatch |
| #12 | CM Pop-Up – Create engaging popups to capture attention and boost interaction | 24 | 466 | 408 | 8k+ | | | Output is not escaped |
| #13 | Icegram Engage – Popups, Optins, CTAs & Lead Generation | 91 | 14 | 10 | 10k+ | | | wp function not compatible with requires wp |
| #14 | WP Popups – WordPress Popup builder | 25 | 440 | 342 | 30k+ | | | Output is not escaped |
| #15 | Visual Composer Website Builder | 16 | 82 | 320 | 40k+ | | | Non-prefixed global variable |
| #16 | Popup Builder – Create highly converting, mobile friendly marketing popups. | 30 | 26 | 722 | 200k+ | | | Non-prefixed global variable |
