FirePlugins
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment | 2 | – | Oct 10, 2026 |
| FireBox | 1 | – | Dec 9, 2025 |
| FireBox Popups – Increase Sales and Grow Your Email List | 1 | – | Jun 18, 2026 |
Exploited and recent CVEs
- CVE-2026-104724 FireBox <= 3.1.13 - Authenticated (Author+) SQL Injection via FireBox Form Display Condition 0.2%
- CVE-2026-76801 FireBox <= 3.1.10 - Authenticated (Author+) Remote Code Execution to Privilege Escalation 0.9%
- CVE-2026-12120 FireBox Popups <= 3.1.7 - Unauthenticated Sensitive Information Exposure in 'form_id' Parameter 0.3%
- CVE-2025-67545 WordPress FireBox plugin <= 3.1.0-free - Cross Site Scripting (XSS) vulnerability 0.2%