Woobox

Woobox has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for Woobox has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Woobox is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Woobox vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-47675

Woobox <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2025-05-07 00:00	Woobox <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting Woobox <= 1.6	`CVE-2025-47675`	6.4 Medium	Muhammad Yudha - DJ	Yes
2025-05-07 00:00	Woobox <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting Woobox <= 1.6	`CVE-2025-47662`	6.4 Medium	zaim	Yes

Showing 1–2 of 2 reports

Latestv1.7

Woobox

Author

woobox

3.7(3)

74/100

Last Updated

2025-06-05 (1y ago)

Active Installs

1,000+

Downloads

31,147

Requires WP

3.2+

Requires PHP

5.2.4+

Tested up to

WP 6.8.8

Created

2016-05-18 (11y ago)

Embedding your Woobox promotions on your WordPress site has never been easier! This plugin allows quick and easy installation of your promotion with the use of shortcode [woobox] for embedding on WordPress. Woobox helps you easily create powerful contests, sweepstakes, coupons, quizzes and more to grow your audience and amplify your marketing. You could embed promotions on WordPress before, but the process was complicated and didn’t work for all types of users on WordPress. We wanted to simplify the process, so we created the Woobox plugin and made it available for all our faithful WordPress users. You create a promotion on Woobox, grab the WordPress shortcode and with the plugin installed on your WordPress site, just paste it into any post or page on WordPress and that’s it. Don’t have a Woobox account? No problem! Join the 4 million brands that use Woobox by going to www.Woobox.com and create your free account today!

View on WordPress.org