| #1 | Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation | 32 | 462 | 41 | 1m+ | | | Text Domain Mismatch |
| #2 | Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder | 66 | 45 | 689 | 700k+ | | | Non-prefixed hook name |
| #3 | Popup Builder – Create highly converting, mobile friendly marketing popups. | 30 | 28 | 722 | 200k+ | | | Non-prefixed global variable |
| #4 | Hustle – Email Marketing, Lead Generation, Optins, Popups | 37 | 4,894 | 5,942 | 90k+ | | | Non-prefixed global variable |
| #5 | Popup Box – Create Countdown, Coupon, Video, Contact Form Popups | 24 | 486 | 1,255 | 50k+ | | | Non-prefixed global variable |
| #6 | Lightbox & Modal Popup WordPress Plugin – FooBox | 25 | 566 | 1,365 | 100k+ | | | Non-prefixed global variable |
| #7 | MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | 22 | 2,625 | 2,458 | 10k+ | | | Output is not escaped |
| #8 | Depicter — Popup & Slider Builder | 36 | 130 | 121 | 80k+ | | | Exception output is not escaped |
| #9 | Smart Popup by Supsystic | 22 | 3,120 | 492 | 10k+ | | | Non Singular String Literal Domain |
| #10 | Popups for Divi | 89 | 99 | 57 | 100k+ | | | Text Domain Mismatch |
| #11 | Advanced Popups | 99 | 4 | 0 | 60k+ | | | wp function not compatible with requires wp |
| #12 | Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content | 24 | 239 | 291 | 20k+ | | | error log print r |
| #13 | Poptin – Email Marketing Automation, Newsletter & Exit Pop Ups, Email Popups | 35 | 157 | 29 | 20k+ | | | Text Domain Mismatch |
| #14 | CM Pop-Up – Create engaging popups to capture attention and boost interaction | 24 | 466 | 408 | 8k+ | | | Output is not escaped |
| #15 | Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers | 84 | 1 | 73 | 70k+ | | | Direct Query |
| #16 | Modal Window – create popup modal window | 40 | 9 | 178 | 10k+ | | | Non-prefixed global variable |
| #17 | ITRO Popup Plugin | 33 | 591 | 135 | 6k+ | | | Output is not escaped |
| #18 | Popup Maker – Responsive popup, Exit Intent Pop up, Email Optins, Autoresponder & More | 55 | 50 | 63 | 7k+ | | | Text Domain Mismatch |
| #19 | HashBar – Announcement, Notification Bar & Popup Campaign | 25 | 2,726 | 615 | 9k+ | | | Text Domain Mismatch |
| #20 | MailMunch – Grow your Email List | 36 | 102 | 49 | 6k+ | | | Output is not escaped |
| #21 | YITH WooCommerce Popup | 30 | 395 | 1,551 | 2k+ | | | Non-prefixed global variable |
| #22 | Themify Popup | 29 | 229 | 108 | 8k+ | | | Text Domain Mismatch |
| #23 | ARI Fancy Lightbox – Popup for WordPress | 62 | 8 | 107 | 10k+ | | | Non-prefixed namespace |
| #24 | Easy Modal | 24 | 564 | 299 | 7k+ | | | Unsafe printing function |
| #25 | Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce | 29 | 148 | 245 | 5k+ | | | Unsafe printing function |
| #26 | WP Popup Builder – Popup Forms and Marketing Lead Generation | 34 | 357 | 143 | 3k+ | | | Text Domain Mismatch |
| #27 | FireBox Popups – Increase Sales and Grow Your Email List | 22 | 157 | 826 | 7k+ | | | Non-prefixed global variable |
| #28 | HollerBox — Fast & Effective Popups & Lead-Generation | 35 | 77 | 92 | 2k+ | | | Output is not escaped |
| #29 | Anything Popup | 37 | 164 | 185 | 2k+ | | | Non-prefixed global variable |
| #30 | PopBox For Elementor | 66 | 31 | 9 | 3k+ | | | Output is not escaped |
| #31 | WPC Added To Cart Notification for WooCommerce | 98 | | 17 | 3k+ | | | Non-prefixed class |
| #32 | Live Sales Notification (Recent Sales Popups) | 33 | 114 | 120 | 400 | | | SQL query is not prepared |
| #33 | Cart Popup for WooCommerce | 51 | 9 | 115 | 9k+ | | | Non-prefixed global variable |
| #34 | Modal Popup Box — Popup Maker & Popup Builder | 96 | 1 | 3 | 2k+ | | | Input is not sanitized |
| #35 | Email Subscription Popup — Newsletter & GDPR Consent | 35 | 683 | 193 | 1k+ | | | Output is not escaped |
| #36 | Convertful – Your Ultimate On-Site Conversion Tool | 48 | 15 | 34 | 3k+ | | | wp function not compatible with requires wp |
| #37 | Simple Popup Plugin | 47 | 53 | 5 | 1k+ | | | Output is not escaped |
| #38 | WP Terms Popup – Terms and Conditions and Privacy Policy WordPress Popups | 38 | 299 | 58 | 3k+ | | | Non Singular String Literal Domain |
| #39 | Popup with fancybox | 35 | 196 | 168 | 900 | | | Unsafe printing function |
| #40 | WPB Popup for Contact Form 7 – Showing Contact Form 7 Popup on Button Click | 60 | 22 | 9 | 6k+ | | | Output is not escaped |
| #41 | AI Popup Builder & Popup Maker by OptiMonk | 35 | 81 | 65 | 4k+ | | | Text Domain Mismatch |
| #42 | Popup Box – Easily Create WordPress Popups | 45 | 7 | 151 | 6k+ | | | Non-prefixed global variable |
| #43 | Slick Popup: Contact Form 7 Popup Plugin | 22 | 2,322 | 316 | 1k+ | | | Text Domain Mismatch |
| #44 | All In One Lightbox – show any media in beautiful popups | 100 | | 0 | 3k+ | | | No open findings |
| #45 | Alligator Popup | 98 | 2 | 1 | 2k+ | | | outdated tested upto header |
| #46 | AI Popup | 23 | 1,224 | 636 | 400 | | | Text Domain Mismatch |
| #47 | Zotabox – 20+ Promotional Sales tools to boost your subscribers and sales | 94 | 12 | 8 | 500 | | | wp function not compatible with requires wp |
| #48 | Content Blocks Builder – Create blocks, repeater blocks with carousel, grid, popup layouts | 98 | | 38 | 1k+ | | | Non-prefixed hook name |
| #49 | Modal Guten Block | 35 | 6 | 3 | 2k+ | | | Hidden files included |
| #50 | Popup addon for Ninja Forms | 40 | 121 | 25 | 900 | | | Output is not escaped |