Popup Builder – Create highly converting, mobile friendly marketing popups.

85 Quality Score

Active Installs

24/30

With 200,000 active installs, the plugin has a strong user base but sits well behind category leaders like Popup Maker (700,000) and OptinMonster (1,000,000).

Update Freshness

25/25

The plugin was updated on 2026-05-27 and scores full marks, indicating the developer is actively shipping fixes and improvements.

User Rating

14/15

A 94 out of 100 rating across 2,210 reviews reflects strong and consistent user satisfaction.

Support Health

8/15

Only 3 of 7 support threads are resolved (42.9%), which is a weak spot and suggests slower or less complete responses on the WordPress.org forum.

WP Compatibility

15/15

Tested up to WordPress 7.0 with PHP 5.3.3 required, the compatibility score is excellent and the plugin will run on virtually any hosting environment.

Scores higher than 96% of indexed plugins

About

Increase Sales, Lead Generation, Conversion rates and receive good Call to Action rates with smart WordPress popup plugin.

Active Installs 200k+

Rating ★★★★½ 4.7/5

Last Updated 2026-07-18 8:00am GMT

Requires WordPress 4.2+

Tested Up To 7.0.4

Requires PHP 5.3.3+

Security History

23 known vulnerabilities, all patched

3 Critical 6 High 14 Medium

Most recent: February 18, 2026

View details ▸

Popup Builder - Create highly converting, mobile friendly marketing popups. <= 4.4.2 - Improper Authorization to Unauthenticated Subscriber Removal via Predictable Tokens Medium

February 18, 2026 Patched in ["4.4.3"] CVE-2025-13079

Popup Builder – Create highly converting, mobile friendly marketing popups. <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

December 12, 2025 Patched in ["4.4.2"] CVE-2025-9856

Popup Builder <= 4.3.4 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

November 21, 2024 Patched in ["4.3.5"] CVE-2024-9428

Popup Builder <= 4.3.6 - Sensitive Information Exposure via Imported Subscribers CSV File Medium

August 28, 2024 Patched in ["4.3.7"] CVE-2024-2541

Popup Builder <= 4.3.0 - Missing Authorization in Multiple AJAX Actions High

June 14, 2024 Patched in ["4.3.2"] CVE-2024-2544

Popup Builder – Create highly converting, mobile friendly marketing popups <= 4.3.1 - Missing Authorization and Nonce Exposure High

June 14, 2024 Patched in ["4.3.2"] CVE-2023-6696

Popup Builder <= 4.2.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Custom JS Medium

May 31, 2024 Patched in ["4.3.0"] CVE-2024-2506

Popup Builder <= 4.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Medium

March 25, 2024 Patched in ["4.2.7"] CVE-2024-30184

Popup Builder <= 4.2.5 - Authenticated (Admin+) Server-Side Request Forgery Medium

January 17, 2024 Patched in ["4.2.6"] CVE-2023-6294

Popup Builder <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting Medium

December 11, 2023 Patched in ["4.2.3"] CVE-2023-6000

Popup Builder <= 4.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

August 28, 2023 Patched in ["4.2.2"] CVE-2023-3226

Popup Builder – Create highly converting, mobile friendly marketing popups. <= 4.1.11 - Cross-Site Request Forgery to Settings Update High

June 30, 2022 Patched in ["4.1.12"] CVE-2022-29495

Popup Builder <= 4.1.10 - Authenticated (Admin+) Cross-Site Scripting Medium

June 20, 2022 Patched in ["4.1.11"] CVE-2022-1894

Popup Builder <= 4.1.0 - Cross-Site Request Forgery Medium

June 17, 2022 Patched in ["4.1.11"] CVE-2022-32289

Popup Builder <= 4.1.0 - SQL Injection Critical

March 7, 2022 Patched in ["4.1.1"] CVE-2022-0479

Popup Builder <= 4.0.6 - Authenticated SQL Injection via order & orderby Parameters High

January 24, 2022 Patched in ["4.0.7"] CVE-2022-0228

Popup Builder <= 4.0.6 - Local File Inclusion and PHAR Deserialization High

January 24, 2022 Patched in ["4.0.7"] CVE-2021-25082

Popup Builder <= 3.73 - Reflected Cross-Site Scripting Medium

February 2, 2021 Patched in ["3.74"] CVE-2021-24152

Popup Builder <= 3.72 Missing Authorization on AJAX actions Medium

January 28, 2021 Patched in ["3.72"]

Popup Builder <= 3.63 - Unauthenticated Stored Cross-Site Scripting High

March 12, 2020 Patched in ["3.64.1"] CVE-2020-10196

Popup Builder <= 3.63 - Authenticated Settings Modification, Configuration Disclosure, and User Data Export Medium

March 12, 2020 Patched in ["3.64.1"] CVE-2020-10195

Popup Builder 2.2.8 - 2.6.7.6 - PHP Object Injection Critical

February 16, 2020 Patched in ["3.0"] CVE-2020-9006

Popup Builder <= 3.44 - SQL Injection Critical

August 6, 2019 Patched in ["3.45"] CVE-2019-14695

What It Does

Popup Builder is a WordPress plugin that lets you design and display marketing popups across your site to capture leads, promote offers, and drive conversions. It supports a wide range of popup types and targeting options aimed at ecommerce, email list building, and general marketing campaigns. The plugin works with both block and classic editors and includes mobile-friendly templates.

Who It's For

This plugin is a solid fit for small to mid-sized ecommerce stores, affiliate marketers, and online course creators who want an affordable, built-in popup solution without paying for a premium tool like OptinMonster. It also works well for nonprofits and service businesses running lead generation or product launch campaigns. Sites with simple to moderate targeting needs will get the most value.

Who Should Skip It

If you run a high-traffic enterprise site that needs advanced A/B testing, deep analytics, and tight CRM integrations, you will likely outgrow this plugin quickly. Developers who need deep hooks, custom triggers, or programmatic popup control may also find it limiting.

The Bottom Line

Popup Builder delivers a strong overall quality score of 85.34, with excellent maintenance, ratings, and compatibility that make it a safe, low-risk choice for most WordPress sites. Its main weakness is support responsiveness on the public forum, so buyers who rely on timely help should weigh that against the plugin's strong feature-to-cost ratio. For typical lead gen and ecommerce popup needs it is a dependable pick, but power users may want Popup Maker or OptinMonster instead.

Pick this if you want a larger install base (700,000) and a more developer-friendly extension ecosystem for complex trigger conditions.

Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation 87/100

Choose OptinMonster when you need enterprise-grade features like advanced A/B testing, exit-intent detection, and deep CRM integrations, and you are willing to pay for them.

Popups for Divi 84/100

Pick this if your site is built with Divi and you want popups that integrate natively with the Divi builder workflow.

Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers 84/100

Choose this alternative if gamified, multi-step popups and WooCommerce-specific triggers are central to your conversion strategy.

Depicter — Popup & Slider Builder 83/100

Pick Depicter if you also need modern sliders and a more visually polished, animation-rich builder experience.