CVE-2026-104724 | fireplugins FireBox Plugin up to 3.1.13 on WordPress Form Display Condition preserveCampaignRoleAccess sql injection

October 10, 2026 Yanac

A vulnerability labeled as critical has been found in fireplugins FireBox Plugin up to 3.1.13 on WordPress. The affected element is the function preserveCampaignRoleAccess of the component Form Display Condition. Such manipulation leads to sql injection.

This vulnerability is listed as CVE-2026-104724. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More