shouldiuse.io

Categories

VERDICT

OptinMonster Review

Depends

Should I use OptinMonster?

Powerful lead generation software that converts abandoning visitors into subscribers with our dynamic marketing tools and Exit Intent® technology. - optinmonster.com

· 1 month ago

Buy if you run an ecommerce or content site and will genuinely use advanced targeting, split testing, and exit-intent campaigns at scale. Skip it if you need one simple popup, want a free tier, or cannot accept its repeated security incidents.

Confidence

Medium. Based on ~40 public sources: reviews (G2, Reddit, Trustpilot, Crazy Egg), security research (Wordfence, Sansec, Patchstack, NVD), and vendor pages. Pricing specifics and support quality are thinly evidenced.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityNo support-quality evidence in reviewed sources
  • Security posture

Pricing

Annual billing, lowest tier

Base

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierNo
Plus / ProAnnual billing, mid tiers
GrowthAnnual billing, top tier

Best for

  • Ecommerce stores fighting cart abandonment
  • Content publishers scaling email lists
  • Marketing teams running A/B-tested popup campaigns

Not for

  • Small sites needing one simple exit popup
  • Anyone expecting a free tier
  • Security-sensitive WordPress fleets
  • Solo operators without time to tune campaigns

Gotchas - check before you buy

high

Supply chain attack injected malware that added admin accounts; verify and update if installed.

medium

Four annual tiers; entry plans restrict sites and features, pushing upgrades as you grow.

medium

Recurring plugin CVE history means you must apply updates promptly or risk compromise.

low

Vendor upsells a paid 'University' training program on top of the subscription.

Pros and cons

Pros

  • Exit Intent® targeting converts abandoning visitors
  • Split testing and targeting rules without code
  • Widely adopted: over 1.2M sites
  • Named case study: Biddyco tripled conversions within a month
  • Generally positive user reviews on G2 and Shopify

Cons

  • Supply chain attack served tampered script, created rogue admin accounts
  • 2021 plugin vulnerabilities affected roughly 1M sites
  • No free plan at all
  • Reddit users actively hunt cheaper alternatives for basic needs
  • Overall reviews are mixed

Sources & method

- 15 sources - Poor track record: multiple plugin CVEs plus a supply chain attack hitting ~1.2M sites; vendor has published an incident response and safeguards page.

official x4review x6security x4news x1
  • CDN supply chain attack, Tampered script served via OptinMonster and TrustPulse; malware added admin accounts across ~1.2M sites.
  • CVE-2021-39341, Plugin vulnerability affecting up to 1,000,000 sites, disclosed via Wordfence.
  • CVE-2023-0772, Medium-severity vulnerability (CVSS 6.5) in the OptinMonster WordPress plugin.
  • CSRF vulnerability in v2.15.3, Notice-dismissal cross-site request forgery fixed in later plugin versions.

Key stats

  • Value for money: 2/5

    Rating

  • Annual billing, lowest tier

    Starting price

  • 15

    Sources

  • Analyzed

  • Value for money: 2/5. No free tier; Reddit users hunt cheaper alternatives
  • Ease of use: 4/5. Testimonials call it intuitive for non-developers
  • Feature depth: 4/5. Exit-intent, targeting rules, A/B testing, playbooks
  • Support quality. No support-quality evidence in reviewed sources
  • Security posture: 1/5. Multiple CVEs; supply chain attack hit 1.2M sites
  • 1.2M+ Sites using it Per vendor and review listings
  • ~1,042 G2 review count Aggregate review trackers
  • 4 Pricing tiers No free plan offered
  • 2+ Known CVEs since 2021 Plus a supply chain incident

Pricing

Base

Annual billing, lowest tier

  • Entry-level campaign and site limits

Plus / Pro

Annual billing, mid tiers

  • More sites
  • Advanced targeting and A/B testing

Growth

Annual billing, top tier

  • Highest limits and support level

Security

Poor track record: multiple plugin CVEs plus a supply chain attack hitting ~1.2M sites; vendor has published an incident response and safeguards page.

  • CDN supply chain attackTampered script served via OptinMonster and TrustPulse; malware added admin accounts across ~1.2M sites.⁴
  • CVE-2021-39341Plugin vulnerability affecting up to 1,000,000 sites, disclosed via Wordfence.⁶
  • CVE-2023-0772Medium-severity vulnerability (CVSS 6.5) in the OptinMonster WordPress plugin.⁷
  • CSRF vulnerability in v2.15.3Notice-dismissal cross-site request forgery fixed in later plugin versions.⁸

What users say

Users praise conversion results and targeting power, but many complain about pricing and recommend simpler or cheaper alternatives.

“I only need a pop-up on exit intent”
Reddit, r/SEO
“I'd recommend Hello Bar.”
Reddit, r/Wordpress

Companies that use it

Full analysis

Based on ~40 public sources: reviews (G2, Reddit, Trustpilot, Crazy Egg), security research (Wordfence, Sansec, Patchstack, NVD), and vendor pages. Pricing specifics and support quality are thinly evidenced.

Powerful exit-intent popup engine for serious list growth — but no free plan and a rough security record. Small sites: skip.

Methodology

Based on ~40 public sources: reviews (G2, Reddit, Trustpilot, Crazy Egg), security research (Wordfence, Sansec, Patchstack, NVD), and vendor pages. Pricing specifics and support quality are thinly evidenced.

Read how a report is made.

Sources

  1. OptinMonster Pricingoptinmonster.com
    official
  2. Is OptinMonster Free?optinmonster.com
    official
  3. OptinMonster Security Incident Noticeoptinmonster.com
    official
  4. OptinMonster supply chain attack hits 1.2 million sites (Sansec)sansec.io
    security
  5. OptinMonster plugin hacked in CDN supply chain attack (BleepingComputer)bleepingcomputer.com
    news
  6. 1,000,000 Sites Affected by OptinMonster Vulnerabilities (Wordfence)wordfence.com
    security
  7. CVE-2023-0772 Detail (Strix)strix.ai
    security
  8. CSRF vulnerability in OptinMonster plugin (Patchstack)patchstack.com
    security
  9. OptinMonster Reviews (G2)g2.com
    review
  10. Cheaper Alternatives to Opt-In Monster? (Reddit r/SEO)reddit.com
    review
  11. OptinMonster Review: The Good and the Bad (Crazy Egg)crazyegg.com
    review
  12. OptinMonster Review: Powerful Lead Gen for SMBs (copy.ai)copy.ai
    review
  13. OptinMonster Shopify App Reviewsapps.shopify.com
    review
  14. Biddyco Tripled Conversions Case Studyoptinmonster.com
    official
  15. OptinMonster Trustpilot Reviewstrustpilot.com
    review

Add this review to your site

This check for OptinMonster says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends OptinMonster Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.