Fyrebox Quizzes
Fyrebox Quizzes has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; none of them are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.
None of the 2 issues recorded for Fyrebox Quizzes have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
2 independent researchers contributed these findings, one record each. Fyrebox Quizzes is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2025-50035Fyrebox Quizzes <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Fyrebox Quizzes
Author
CyrilG
Create a quiz on the fyrebox.com website and display it easily in a post or on a tab. Fyrebox makes it easy to create interactive quizzes for your website. Create a quiz to generate leads, to educate or simply to engage your audience. You can send the data collected by your quiz automatically to more than 300 applications. Examples [fyrebox gid="RBkzEXpGLo" gt="6" oid="2TKxpeyZpH" /]
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C