Smart Popup by Supsystic
Smart Popup by Supsystic has 12 disclosed vulnerabilities in the WordSec catalog, reported between 2016 and 2026; all 12 are fixed as of September 2026. Their average CVSS score is 6.7, and the most serious one scores 9.1 out of 10. Severity breakdown: 1 critical and 5 high. 2026 was the busiest year with 4 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (17%). Other recurring categories include Cross-Site Scripting, Exposure Of Sensitive Information To An Unauthorized Actor.
Every one of the 12 issues recorded for Smart Popup by Supsystic has a vendor fix available, so running the current release closes all known holes.
9 independent researchers contributed these findings, most of them (2) reported by Asim Alshaya. Smart Popup by Supsystic is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2024-52434Popup by Supsystic <= 1.10.29 - Authenticated (Admin+) Remote Code Execution
Read the full analysisVulnerability Records
Smart Popup by Supsystic
Author
supsystic
Smart Popup – Targeted WordPress Popups That Convert (Without Annoying Visitors) Turn more visitors into subscribers, buyers, and bookings — without overwhelming them. Smart Popup lets you show the right message at the right moment using advanced triggers and precise targeting controls. More control. Better timing. Higher conversions. 🎯 Show the Right Popup at the Right Time Display popups based on real visitor behaviour: Exit intent (when someone is about to leave) Scroll depth Time delay Specific pages or categories Device type (desktop or mobile) New vs returning visitors Instead of showing more popups, show smarter ones. 🛒 Increase Sales Without Being Aggressive Perfect for online stores and service businesses: Cart abandonment reminders Free shipping threshold nudges Limited-time promotions Product launches Upsells and cross-sells Targeted popups convert better than generic ones. 🔔 Announcements & Deadline Messaging Popups aren’t just for email capture. Use them to communicate important updates: “Order by Dec 20 for Christmas delivery” “Bookings close Friday” “Same-day dispatch ends at 2pm” Event reminders Service availability updates Clear messaging prevents missed sales and confused customers. 🧲 Grow Your Email List — Without Damaging User Experience Capture subscribers with: Exit-intent lead magnets Scroll-triggered content upgrades Timed newsletter invitations Inline opt-in popups Spam protection on the subscribe form via Google reCaptcha v2 (PRO also adds reCaptcha v3, hCaptcha and Cloudflare Turnstile – pick whichever captcha fits your site) Set frequency limits so visitors don’t feel overwhelmed. ⚙ Built for Control and Flexibility Smart Popup includes: Visual popup builder Custom styling and branding options Page-level targeting Frequency controls Responsive design A/B testing support Whether you’re a beginner or a developer, you stay in control. 💡 Why Choose Smart Popup? Advanced targeting without SaaS lock-in No monthly fees Built specifically for WordPress Flexible for developers Simple for site owners You decide who sees your message. You decide when it appears. You decide how often it shows. That’s how conversions increase — without harming user experience. If you’re looking for a powerful yet flexible popup plugin for WordPress, Smart Popup is built to help you convert more visitors — intelligently.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C