Advanced Popups
Advanced Popups has one disclosed vulnerability in the WordSec catalog, all reported in 2020; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Advanced Popups has a vendor fix available, so running the current release closes it.
All of these findings were reported by Jerome Bruandet. Advanced Popups is installed on roughly 60,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2021-4421Advanced Popups <= 1.1.1 - Cross-Site Request Forgery Bypass
Read the full analysisVulnerability Records

Advanced Popups
Author
codesupplyco
Advanced Popups is a lightweight yet powerful WordPress popup plugin designed for maximum conversion. Create beautiful, targeted popups to grow your email list, display important announcements, show cookie notices, or promote special offers. Key Features: Multiple Popup Types – Choose between Content Box (perfect for opt-ins), Notification Box (ideal for announcements), or Notification Bar (great for cookie notices) Strategic Placements – Position your popups where they’ll perform best – top, bottom, center, corners, or sides of the screen Smart Triggers – Display popups at the perfect moment with multiple trigger options: Time delay Page viewed Exit intent (catch visitors before they leave) Scroll position (target engaged readers) Manual launch via button click Accept agreement (for compliance notices) Precise Targeting – Show popups exactly where they matter: Specific pages, posts, or custom post types Taxonomy pages (categories, tags) Front page, archives, or search results Based on user login status (guest vs. logged-in) Visitor-Friendly Controls – Respect your visitors with: Frequency limits (avoid popup fatigue) Mobile-specific settings Multiple close options (overlay click, ESC key) Beautiful Animations – Choose from fade, slide, zoom, or combined effects for entrance and exit Fully Customizable – Control width, overlay appearance, and many other visual aspects Advanced Popups is optimized for performance, ensuring your site speed isn’t compromised while delivering high-converting popups that respect user experience. Perfect for marketers, content creators, and site owners who want to increase engagement without annoying visitors. See Advanced Popups in action: Check out our live examples and demos to see what you can create with this plugin.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C