Vulnerabilities / FireBox
FireBox vulnerabilities
Advisories WPSec published for FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment. Other sources may list more. Its attack surface: FireBox on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-10 | WPSEC-2026-2794 | FireBox <= 3.1.15 - Unauthenticated Reflected Cross-Site Scripting via Smart Tags | Medium 6.1 | 3.1.16 |
License: CC BY 4.0