Is Popup Builder & Popup Maker for WordPress safe?

Every recorded flaw

• May 25, 2024Popup Builder by OptinMonster – WordPress Popups for Optins, Email Newsletters and Lead Generation: Stored Cross-Site ScriptingCVE-2024-4045 · affects up to 2.16.1 · reported by WordfenceMedium 6.4
• Apr 26, 2024OptinMonster: Cross-Site Request Forgery (CSRF)CVE-2024-33691 · affects up to 2.15.3 · reported by PatchstackMedium 4.3
• Mar 13, 2023Popup Builder by OptinMonster: Does not ensure that the campaign to be loaded via some shortcodes is actually a campaignCVE-2023-0772 · fixed in 2.12.2 · reported by WPScanMedium 6.5
• Nov 1, 2021OptinMonster: Sensitive information disclosure and unauthorized setting updatesCVE-2021-39341 · affects up to 2.6.4 · reported by Wordfence22% oddsHigh 8.2
• Sep 20, 2021OptinMonster: Reflected Cross-Site ScriptingCVE-2021-39325 · affects up to 2.6.0 · reported by WordfenceMedium 6.1
• Sep 20, 2019The optinmonster plugin before 1.1.4.6 for WordPress has incorrect access control for shortcodes because of a nonce leak.CVE-2016-10996 · fixed in 1.1.4.6 · reported by MITRE1.1% oddsMedium 5.3

Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.