Social Proof Popups & Real-Time Notifications – Herd Effects

Social Proof Popups & Real-Time Notifications – Herd Effects has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; all 6 are fixed as of September 2026. Their average CVSS score is 5.1, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2023 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 3 of the records (50%). Other recurring categories include Cross-Site Scripting, PHP Remote File Inclusion.

Every one of the 6 issues recorded for Social Proof Popups & Real-Time Notifications – Herd Effects has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, most of them (2) reported by Bob Matyas. Social Proof Popups & Real-Time Notifications – Herd Effects is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
5.1/ 10
Patch Coverage100%
Open

0

Fixed

6

Get automatic notifications for all Social Proof Popups & Real-Time Notifications – Herd Effects vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2022-29448

Herd Effects <= 5.2 - Local File Inclusion

Read the full analysis

Vulnerability Records

6 records
Social Proof Popups & Real-Time Notifications – Herd Effects banner
Latestv6.2.5

Social Proof Popups & Real-Time Notifications – Herd Effects

Wow-Company

Author

Wow-Company

3.9(15)
78/100
Last Updated
2026-08-25 (19d ago)
Active Installs
1,000+
Downloads
60,961
Requires WP
5.0+
Requires PHP
7.4+
Tested up to
WP 7.1
Created
2016-08-20 (10y ago)

Boost Conversions with Herd Effects – Social Proof Notifications for WordPress Herd Effects is a flexible notification plugin that allows you to create custom popups to display simulated or user-defined activities on your website. While the plugin offers the appearance of social proof, it does not automatically pull real-time data from your site. Instead, users can create notifications by defining their own variables, such as recent purchases or signups, to simulate activity and drive engagement. Display pop-up notifications for sales, signups, or other actions using customizable templates that capture attention and motivate visitors to act. = Key Features of Herd Effects = Customizable Popup Templates: Easily create your own notifications using templates with variables like names, locations, or numbers. Simulated Activity: Users manually define the data (e.g., recent purchases or signups) to create the appearance of social proof. Notification Timing Control: Set intervals for notifications to ensure consistent visibility. 2,000+ FontAwesome Icons: Choose from over 2,000 icons or upload custom ones to personalize notifications. Custom Notification Titles: Personalize titles to match specific actions or events on your site. Shortcode Support: Display notifications anywhere on your site using shortcodes. Advanced Display Settings: Control visibility based on user activity, screen size, or specific devices. GDPR Compliant: Cookie-free operation to ensure compliance with privacy laws. — Unlock even more features with the Pro version to maximize engagement with advanced notifications. Upgrade to Pro | Demo Pro — = Use Cases = Herd Effects can be used for various notifications that simulate activity on your WordPress site, including: Recent Purchases: Create notifications for recent sales to build trust and encourage further purchases. Registration Alerts: Display notifications for new user signups to create a sense of activity. Service Orders: Simulate service bookings to create urgency. Event Signups: Encourage event participation by displaying simulated or user-defined event registrations. App Installations: Show custom notifications for app downloads or installations to boost credibility. Real-Time Activity Simulation: Showcase predefined actions like, “John from NYC just signed up,” to mimic live activity. Note: The notifications do not reflect actual real-time user actions unless you input the data manually. — = Integration with Other FREE Plugins = Maximize your notifications by integrating Herd Effects with these plugins: Counter Box: Add countdowns and timers to complement your notifications. Buttons: Create call-to-action buttons within your custom notifications. Calculator Builder: Add calculators for interactive elements alongside your notifications. Floating Button: Add sticky floating buttons to drive further engagement. Modal Window: Create in-depth announcements with modal windows alongside your popups Support Need help? Visit our support center for questions or troubleshooting.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C