https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T13:30:27.183568+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-12120 CVE-2026-12120 — FireBox Popups <= 3.1.7 - Unauthenticated Sensitive Information Exposure in 'form_id' Parameter 2026-10-07T13:30:27.212323+00:00

Affected: fireplugins FireBox Popups – Increase Sales and Grow Your Email List

The FireBox Popups – Increase Sales and Grow Your Email List plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.7 via the 'form_id' parameter. This makes it possible for unauthenticated attackers to extract download a full CSV export of all form submissions — including any personally identifiable information submitted by users — for any arbitrary form_id.