Skip to content
PluginCanary

FireBox - WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment

by FirePlugins · 6,000+ active installs · Checked 3 Nov 2026
Healthy2 Warnings

Healthy: vulnerability published 9 Oct 2026, fixed in 3.1.14.

85/ 100 Canary Score
Sub-scores for FireBox - WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment
Ownership100
Maintenance100
Security75
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 3.1.14. Update to version 3.1.14 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 8 Sep 2026, fixed in 3.1.11. Update to version 3.1.11 or later.8 Sep 2026Evidence
  • InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master20 Jan 2021 to 20 Jan 2021, 1 commits
fireplugins25 Feb 2021 to 22 Oct 2026, 276 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
13 days ago
Releases, 24 months
38
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter for FireBox - WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment
Q1 20245
Q2 20248
Q3 20244
Q4 20248
Q1 20256
Q2 20254
Q3 20257
Q4 20255
Q1 20261
Q2 20263
Q3 20265
Q4 20262

Last release 22 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
9 Oct 2026FireBox <= 3.1.13 - Authenticated (Author+) SQL Injection via FireBox Form Display Condition5.3<= 3.1.133.1.140
8 Sep 2026FireBox <= 3.1.10 - Authenticated (Author+) Remote Code Execution to Privilege Escalation8.8<= 3.1.103.1.110
17 Jun 2026FireBox Popups <= 3.1.7 - Unauthenticated Sensitive Information Exposure in 'form_id' Parameter5.3<= 3.1.73.1.80
27 Nov 2025FireBox <= 3.1.0-free - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.1.0-free3.1.1-freen/a

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.8 from 76 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star73
4 star0
3 star0
2 star0
1 star3

Momentum

6,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for FireBox - WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment
4 May 2026262
11 May 2026409
18 May 20262,907
25 May 2026681
1 Jun 2026480
8 Jun 2026355
15 Jun 20263,251
22 Jun 2026769
29 Jun 2026471
6 Jul 2026558
13 Jul 20262,872
20 Jul 2026758
27 Jul 2026472
3 Aug 2026403
10 Aug 2026334
17 Aug 20263,045
24 Aug 20265,049
31 Aug 2026914
7 Sep 20263,409
14 Sep 2026945
21 Sep 2026586
28 Sep 20262,550
5 Oct 20261,512
12 Oct 2026679
19 Oct 20262,831
26 Oct 20261,182
2 Nov 2026134

Weekly downloads over the last 4 weeks are 14% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Poptin - Email Marketing Automation, Newsletter & Exit Pop Ups, Email PopupsScore 96 · 20,000+Pop-upScore 93 · 10,000+Popup Builder & Popup Maker for WordPress - OptinMonster Email Marketing and Lead GenerationScore 92 · 1,000,000+Boxzilla - WordPress Popup BuilderScore 92 · 20,000+Popups for DiviScore 91 · 100,000+

Facts

Version3.1.15
AuthorFirePlugins
Added25 Feb 2021
Last updated22 Oct 2026
Active installs6,000+
Requires WordPress6.3
Tested up to7.1.4
Requires PHP7.0
CategoryE-commerce & Shopping
Tagspopup, mailchimp, newsletter, lead generation, free shipping bar

Questions

Is FireBox - WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment still maintained?

FireBox - WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment was last updated on 22 Oct 2026. Its Canary status is Healthy.

Is FireBox - WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment safe?

FireBox - WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment has no open unpatched vulnerabilities on record. 4 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns FireBox - WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment?

The wordpress.org author is FirePlugins. Recent committers: fireplugins, plugin-master. We have recorded no ownership change.

What can I use instead of FireBox - WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment?

Plugins in the same category with a higher Canary Score: Poptin - Email Marketing Automation, Newsletter & Exit Pop Ups, Email Popups, Pop-up, Popup Builder & Popup Maker for WordPress - OptinMonster Email Marketing and Lead Generation, Boxzilla - WordPress Popup Builder, Popups for Divi.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue