Limited-Time Offer

Get Extra 20% off on FullCharge Yearly Plan — available for first 10 users only. Don’t miss out! 🚀

TrackWP

CM Pop-Up · Security record

Is CM Pop-Up safe?

No known vulnerability affects the current version (1.8.7). 9 issues were found in earlier versions and fixed, the latest disclosed on Jul 16, 2025.

Checked 4 days ago against the WPVulnerability database, for version 1.8.7.

How it’s looked after

Last release
Oct 13, 2026 (3 weeks ago)
Releases in the last year
2
Tested up to
WordPress 7.0.8
Active installs
8K+

9 known vulnerabilities

  • 2 high
  • 4 medium
  • 3 not rated

None affects the current version.

Disclosed each year

  • 20202
  • 20231
  • 20243
  • 20252

Every known vulnerability in CM Pop-Up

Newest first, with any that affect the current version at the top.

Questions about CM Pop-Up’s security

Is CM Pop-Up safe to use?

No known vulnerability affects its current version. Earlier versions had issues that are now fixed, so keep CM Pop-Up updated: most attacks target sites that haven’t updated.

Does CM Pop-Up have known security vulnerabilities?

None that affect the current version. WPVulnerability’s database lists 9 older issues, fixed in earlier versions, so keep CM Pop-Up up to date.

Is CM Pop-Up still maintained?

Yes. Its last release was 3 weeks ago. No support threads were opened in the last two months.

Is CM Pop-Up compatible with the latest WordPress?

It’s tested up to WordPress 7.0.8, one version behind the current 7.1. Authors often update this line a few weeks after a release.

Hear about the next one first

Track your plugin on TrackWP and get an alert when a new vulnerability affecting it is published. Every plan has it, the free Starter too; Boost and FullCharge email it at once.

Start free

Vulnerability data from WPVulnerability (CC0), which gathers records from CVE, Wordfence, Patchstack and WPScan. A clean record isn’t a guarantee: keep every plugin updated.