Skip to content
OpenAdvisories

Vendor

fireplugins

4 known vulnerabilities.

Products

FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment 2 FireBox Popups – Increase Sales and Grow Your Email List 1 FireBox 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-104724

    FireBox <= 3.1.13 - Authenticated (Author+) SQL Injection via FireBox Form Display Condition

    The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulnerable to generic SQL Injection via FireBox Form Display Condition in all versions up to, and including, 3.1.13 due to insufficient escaping…

    fireplugins FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment Web / CMS
  • Medium 5.3
    CVE-2026-12120

    FireBox Popups <= 3.1.7 - Unauthenticated Sensitive Information Exposure in 'form_id' Parameter

    The FireBox Popups – Increase Sales and Grow Your Email List plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.7 via the 'form_id' parameter. This makes it possible for unauthenticated attackers to …

    fireplugins FireBox Popups – Increase Sales and Grow Your Email List Web / CMS
  • Medium 6.5
    CVE-2025-67545

    WordPress FireBox plugin <= 3.1.0-free - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FirePlugins FireBox firebox allows Stored XSS.This issue affects FireBox: from n/a through <= 3.1.0-free.

    fireplugins FireBox