WP Manifestindependent plugin directory
manifest / utilities / popups-nekuda-v3

Popups Nekuda WP Registry grade B. Medium-severity findings · 1 findingWP RegistryMedium-severity findings · 1 findingOpen the reportB

A modern popup system for WordPress. Zero external dependencies.

★ 0stars
4release downloads
v4.2.0latest · 3mo ago

Install

Download popups-nekuda-v4.2.0.zip From the v4.2.0 release on GitHub, Jul 9, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/binnyfriedman/popups-nekuda-v3/releases/download/v4.2.0/popups-nekuda-v4.2.0.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

A modern, lightweight popup system for WordPress. Zero external dependencies on the frontend.

Description

Popups Nekuda is a clean, modern popup plugin designed for performance and ease of use.

Key Features:

  • Zero frontend dependencies - No jQuery required, pure vanilla JavaScript
  • Exit Intent & Timeout triggers - Show popups based on user behavior
  • Desktop/Mobile content - Customize content for different devices
  • Slideshow support - Multiple slides with auto-advance
  • Display rules - Show/hide on specific pages, posts, categories
  • Cookie control - Control how often popups appear
  • Scheduling - Set start and end dates for campaigns
  • Accessible - Full keyboard navigation and screen reader support
  • RTL support - Works great with right-to-left languages

Perfect for:

  • Marketing campaigns
  • Newsletter signups
  • Special announcements
  • Cookie consent notices
  • Exit-intent offers

Installation

  1. Upload the plugin files to /wp-content/plugins/popups-nekuda
  2. Activate the plugin through the 'Plugins' menu in WordPress
  3. Go to 'Popups' in your admin menu to create your first popup

Frequently Asked Questions

Does this plugin slow down my site?

No! Assets are only loaded on pages where popups are displayed, and the JavaScript is lightweight with zero dependencies.

Can I show different content on mobile?

Yes! Each popup has separate Desktop and Mobile content tabs. If you don't set mobile content, it will use the desktop content as a fallback.

How do I target specific pages?

Use the Include/Exclude rules in each popup. You can target by page, post, category, or post type.

Can I have multiple slides in a popup?

Yes! Use the "Add Slide" button to create a slideshow that auto-advances every 5 seconds.

Screenshots

  1. Popup editor with Desktop/Mobile tabs
  2. Trigger and cookie settings
  3. Display rules configuration
  4. Frontend popup example

Changelog

3.0.0

  • Complete rewrite with modern architecture
  • Added desktop/mobile content separation
  • Added slideshow support with auto-advance
  • Added pause button for accessibility
  • Improved display rules with grouped search results
  • Zero frontend dependencies (removed jQuery requirement)
  • Better accessibility with focus trapping and keyboard navigation
  • New prefixed post type to avoid conflicts

2.0.0

  • Added exit intent trigger
  • Added scheduling feature
  • Improved admin UI

1.0.0

  • Initial release

Upgrade Notice

3.0.0

Major update with new features and improved performance. Existing popups will be automatically migrated to the new post type.

Releases

4 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v4.2.0 latest
Jul 9, 2026 3mo ago
popups-nekuda-v4.2.0.zip
3
Jul 8, 2026 3mo ago
popups-nekuda-v4.1.0.zip
1
Jul 8, 2026 3mo ago
popups-nekuda-v4.0.0.zip
0
Jan 3, 2026 9mo ago
popups-nekuda-v3.0.2.zip
0
B grade

Security

Popups Nekuda 4.2.0 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
4.2.0
Findings
1
Worst severity
medium
Content hash
d100c9adb068086195298780…

Findings

  • medium Admin AJAX popup editor lacks capability check

    missing_capability

    EditorHandler::handle calls check_ajax_referer('popup_admin_nonce') then renders editor HTML without current_user_can('edit_posts') or a popup-specific capability. Nonce alone is not authorization.

    includes/Admin/Ajax/class-editorhandler.php:22-44

    Recommendation

    Add current_user_can check matching the popup CPT capability before rendering.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.