| #1 | FireBox Popups – Increase Sales and Grow Your Email List | 22 | 153 | 812 | 7k+ | | | Non-prefixed global variable |
| #2 | MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | 22 | 2,625 | 2,458 | 10k+ | | | Output is not escaped |
| #3 | Smart Popup by Supsystic | 22 | 3,172 | 503 | 10k+ | | | Non Singular String Literal Domain |
| #4 | Slick Popup: Contact Form 7 Popup Plugin | 22 | 2,322 | 316 | 2k+ | | | Text Domain Mismatch |
| #5 | AI Popup | 23 | 1,224 | 636 | 400 | | | Text Domain Mismatch |
| #6 | Legal Terms and Conditions Popup for User Login and WooCommerce Checkout | 23 | 524 | 237 | 700 | | | Output is not escaped |
| #7 | Popup Box – Create Countdown, Coupon, Video, Contact Form Popups | 24 | 482 | 1,253 | 50k+ | | | Non-prefixed global variable |
| #8 | Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content | 24 | 237 | 291 | 20k+ | | | error log print r |
| #9 | CM Pop-Up – Create engaging popups to capture attention and boost interaction | 24 | 466 | 408 | 8k+ | | | Output is not escaped |
| #10 | Easy Modal | 24 | 564 | 299 | 7k+ | | | Unsafe printing function |
| #11 | Lightbox & Modal Popup WordPress Plugin – FooBox | 25 | 610 | 1,365 | 100k+ | | | Non-prefixed global variable |
| #12 | HashBar – Announcement, Notification Bar & Popup Campaign | 25 | 2,718 | 610 | 8k+ | | | Text Domain Mismatch |
| #13 | Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce | 29 | 148 | 246 | 5k+ | | | Unsafe printing function |
| #14 | Themify Popup | 29 | 232 | 108 | 8k+ | | | Text Domain Mismatch |
| #15 | Popup Builder – Create highly converting, mobile friendly marketing popups. | 30 | 26 | 722 | 200k+ | | | Non-prefixed global variable |
| #16 | YITH WooCommerce Popup | 30 | 395 | 1,551 | 2k+ | | | Non-prefixed global variable |
| #17 | Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation | 32 | 462 | 41 | 1m+ | | | Text Domain Mismatch |
| #18 | WP Popup | 32 | 539 | 65 | 1k+ | | | Text Domain Mismatch |
| #19 | ITRO Popup Plugin | 33 | 591 | 135 | 6k+ | | | Output is not escaped |
| #20 | Live Sales Notification (Recent Sales Popups) | 33 | 114 | 120 | 400 | | | SQL query is not prepared |
| #21 | HollerBox — Fast & Effective Popups & Lead-Generation | 34 | 78 | 92 | 2k+ | | | Output is not escaped |
| #22 | WP Popup Builder – Popup Forms and Marketing Lead Generation | 34 | 357 | 143 | 3k+ | | | Text Domain Mismatch |
| #23 | Email Subscription Popup — Newsletter & GDPR Consent | 35 | 683 | 193 | 1k+ | | | Output is not escaped |
| #24 | AI Popup Builder & Popup Maker by OptiMonk | 35 | 81 | 65 | 4k+ | | | Text Domain Mismatch |
| #25 | Get a Newsletter | 35 | 138 | 144 | 400 | | | Output is not escaped |
| #26 | Modal Guten Block | 35 | 6 | 3 | 2k+ | | | Hidden files included |
| #27 | Poptin – Email Marketing Automation, Newsletter & Exit Pop Ups, Email Popups | 35 | 168 | 29 | 20k+ | | | Output is not escaped |
| #28 | Popup with fancybox | 35 | 196 | 168 | 1k+ | | | Unsafe printing function |
| #29 | Simple Popup Block | 35 | 14 | 1 | 500 | | | Missing direct file access protection |
| #30 | Depicter — Popup & Slider Builder | 36 | 130 | 121 | 80k+ | | | Exception output is not escaped |
| #31 | MailMunch – Grow your Email List | 36 | 102 | 49 | 6k+ | | | Output is not escaped |
| #32 | Anything Popup | 37 | 164 | 185 | 2k+ | | | Non-prefixed global variable |
| #33 | Disclaimer Popup | 37 | 313 | 53 | 1k+ | | | Text Domain Mismatch |
| #34 | Poptics – Popup Builder, Email Opt-ins, Exit-Intent & WooCommerce Popups Sales | 37 | 59 | 64 | 2k+ | | | SQL query is not prepared |
| #35 | Hustle – Email Marketing, Lead Generation, Optins, Popups | 37 | 4,874 | 5,942 | 90k+ | | | Non-prefixed global variable |
| #36 | WP Terms Popup – Terms and Conditions and Privacy Policy WordPress Popups | 38 | 299 | 58 | 3k+ | | | Non Singular String Literal Domain |
| #37 | I Agree! Popups | 40 | 54 | 46 | 600 | | | Output is not escaped |
| #38 | Modal Window – create popup modal window | 40 | 4 | 170 | 10k+ | | | Non-prefixed global variable |
| #39 | Popup addon for Ninja Forms | 40 | 121 | 25 | 1k+ | | | Output is not escaped |
| #40 | Floating Awesome Button (Sticky Button, Popup, Toast) & 200+ Website Custom Interactive Element | 43 | 66 | 109 | 800 | | | Missing direct file access protection |
| #41 | Popup Box – Easily Create WordPress Popups | 45 | 7 | 151 | 7k+ | | | Non-prefixed global variable |
| #42 | Simple Popup Plugin | 47 | 53 | 5 | 1k+ | | | Output is not escaped |
| #43 | Convertful – Your Ultimate On-Site Conversion Tool | 48 | 15 | 34 | 3k+ | | | wp function not compatible with requires wp |
| #44 | Cart Popup for WooCommerce | 51 | 9 | 115 | 9k+ | | | Non-prefixed global variable |
| #45 | Age Gate Lite | 52 | 28 | 3 | 2k+ | | | Output is not escaped |
| #46 | Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder | 55 | 54 | 692 | 700k+ | | | Non-prefixed hook name |
| #47 | Popup Maker – Responsive popup, Exit Intent Pop up, Email Optins, Autoresponder & More | 55 | 44 | 64 | 7k+ | | | Text Domain Mismatch |
| #48 | Easy GDPR Consent Forms – MailChimp | 57 | 72 | 22 | 500 | | | Text Domain Mismatch |
| #49 | iConvert Promoter | 57 | 98 | 217 | 1k+ | | | Non-prefixed global variable |
| #50 | WPB Popup for Contact Form 7 – Showing Contact Form 7 Popup on Button Click | 60 | 21 | 9 | 6k+ | | | Output is not escaped |