Plugin icon

FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment

firebox

Vulnerabilities:

3

Last Updated:

September 7, 2026

Active Installs:

7000

Published
Title
Fixed in
CVSS
Published
2026-09-08
Title
FireBox < 3.1.11 - Authenticated (Author+) Remote Code Execution to Privilege Escalation
Fixed in
Fixed in 3.1.11
CVSS
7.2 (high)
Published
2026-06-17
Title
FireBox Popups < 3.1.8 - Unauthenticated Sensitive Information Exposure in 'form_id' Parameter
Fixed in
Fixed in 3.1.8
CVSS
5.3 (medium)
Published
2025-11-27
Title
FireBox < 3.1.1-free-free - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.1.1-free
CVSS
6.4 (medium)