Pop Convert ‑ Pop Ups, Banners
Meets our highest standards for performance, design, and integration. Learn moreOpens in new window
Reviews (8,582)
CRITICAL SECURITY FLAW – Will cost you thousands in lost revenue!
Do NOT install this app if you care about your store’s profit margins. It has a massive security loophole in how it handles discount codes. When a user subscribes, they receive a coupon code meant for a single redemption. However, the app fails to restrict the code to that specific customer's email address.
This means anyone can share the code on Reddit or promo sites, and use it freely without ever subscription! To make matters worse, when I brought this basic exploit to their support team, they didn't even understand why this was a problem. Complete incompetence and zero understanding of basic e-commerce security. Use a competitor’s app unless you want people abusing your discounts for free.
Jason here, founder of Pop Convert. I saw your review and personally went through your conversation with Waqas. I wanted to reach out because I completely understand the concern you raised, and it looks like there was some confusion in how the feature was communicated.
We offer several different types of popups, and our standard coupon popup does support dynamically generated, one-time-use coupon codes. Our Wheel popup, which I believe is the one you're referring to, does not yet have this functionality.
Currently, with Wheel popups, you set a discount code for each winning slice, and that code is then displayed to the customer when they win. You're absolutely right that, because the code can't be generated uniquely for each customer, it can potentially be reused by multiple customers.
We actually haven't had this specific request come up before for the Wheel popup, which is why dynamic, one time use codes haven't been implemented there yet. That said, I completely understand why this is important, and I'm going to prioritize getting this functionality added as soon as possible.
I've reached out to you directly as well.
