PluginProbe
FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment / 3.1.14
FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment v3.1.14
3.1.14 3.1.13 3.1.12 3.1.11 3.1.10 3.1.9 3.1.8 3.1.7 trunk 1.0.0 1.0.1 1.0.10 1.0.11 1.0.12 1.0.13 1.0.14 1.0.2 1.0.3 1.0.4 1.0.5 1.0.6 1.0.7 1.0.8 1.0.9 1.1.0 All 123 releases
← All changes | readme.txt +103 -23 3.1.7 → 3.1.14 View file →
@@ -1,28 +1,28 @@
1 -=== FireBox Popups - Increase Sales and Grow Your Email List ===
1 +=== FireBox - WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment ===
2 2 Contributors: fireboxwp, fireplugins, tassosm, stergosz
3 3 Donate link: https://www.fireplugins.com/
4 -Tags: popup, exit popup, exit intent, sticky bar, mailchimp popup
5 -Requires at least: 5.5
6 -Tested up to: 7.0
4 +Tags: popup, lead generation, mailchimp, free shipping bar, newsletter
5 +Requires at least: 6.3
6 +Tested up to: 7.1
7 7 Requires PHP: 7.0
8 -Stable tag: 3.1.7
8 +Stable tag: 3.1.14
9 9 License: GPLv3 or later
10 10 License URI: https://www.gnu.org/licenses/gpl-3.0.html
11 11
12 -Our WordPress Popup Plugin can help you create any kind of popup! Optin Popups, Exit Popup, Scroll Popup, Page Load Popup, Floating Bars and more!
12 +Newsletter optins, discount coupon popups, sticky bars and lightbox modals that capture leads and recover abandoned WooCommerce carts.
13 13
14 14 == Description ==
15 15
16 -### Increase Sales & Capture Leads with FireBox
16 +### Turn More of Your Visitors Into Subscribers & Customers
17 17
18 -FireBox is the [best popup plugin for WordPress](https://www.fireplugins.com/?utm_source=wporg&utm_medium=pluginlisting&utm_campaign=freepluginwporg). Boost your revenue with our Gutenberg-based popup builder. Promote special offers, fight cart abandonment, and grow your email list with personalized popups that can be triggered on page load, on exit-intent or even on user scroll.
18 +Around 70% of carts are abandoned ([Baymard Institute](https://baymard.com/lists/cart-abandonment-rate)) and most visitors leave without buying. [FireBox](https://www.fireplugins.com/?utm_source=wporg&utm_medium=pluginlisting&utm_campaign=freepluginwporg) acts while they're still on your site: recover abandoned carts, grow your email list, and increase average order value with popups, free shipping bars, and onsite campaigns that use your WooCommerce data (cart contents, cart total, purchase history) to show the right offer to the right shopper.
19 19
20 20 [FireBox Website](https://www.fireplugins.com/?utm_source=wporg&utm_medium=pluginlisting&utm_campaign=freepluginwporg) | [Templates](https://www.fireplugins.com/templates/?utm_source=wporg&utm_medium=pluginlisting&utm_campaign=freepluginwporg) | [Knowledge Base](https://www.fireplugins.com/docs/?utm_source=wporg&utm_medium=pluginlisting&utm_campaign=freepluginwporg) | [Test Drive PRO](https://www.fireplugins.com/demo/?utm_source=wporg&utm_medium=pluginlisting&utm_campaign=freepluginwporg)
21 21
22 22 ### ✉️ Collect Email Addresses
23 23
24 -FireBox helps you collect email signups on your website, as well as convert visitors into loyal subscribers, and customers. With customizable options, you can entice visitors with engaging incentives like discount codes, giveaways, lead magnets, or newsletters.
24 +Capture email signups with forms built into your campaigns. Offer a discount code, a giveaway, or a lead magnet, and sync every signup to your email service instead of exporting CSV files.
25 25
26 26 * Email Opt-in Popup
27 27 * [MailChimp Popup](https://www.fireplugins.com/blog/mailchimp-popup-wordpress/?utm_source=wporg&utm_medium=pluginlisting&utm_campaign=freepluginwporg)
28 28 * [SendInBlue Popup](https://www.fireplugins.com/blog/wordpress-sendinblue-popup-form/?utm_source=wporg&utm_medium=pluginlisting&utm_campaign=freepluginwporg)
@@ -33,9 +33,9 @@
33 33 * Restrict Content
34 34
35 35 ### 📈 Increase Product Sales
36 36
37 -Boost your revenue with FireBox, the ultimate WordPress popup plugin, by effectively promoting sales, special offers, and products. Our WordPress popups showcase bestsellers, new arrivals, and related items, reducing cart abandonment and increasing average order value.
37 +Show the right offer to the right shopper using your store's own data. Recommend related products on the product page, catch a full cart before it's abandoned, and nudge shoppers toward your free shipping threshold with a live progress bar.
38 38
39 39 * Promote Offers
40 40 * Increase Average Order Value (Recommend Products)
41 41 * WooCommerce Upsell Popup
@@ -57,12 +57,11 @@
57 57 Learn more: https://www.fireplugins.com/docs/revenue-attribution/revenue-attribution/
58 58
59 59 ### 📣 Guide Visitors
60 60
61 -Stay connected with your audience and convey important messages with FireBox's announcement features, the essential WordPress popup plugin. Whether it's promoting your social network, displaying relevant content, or communicating policies like return or COVID protocols, FireBox popup has you covered.
61 +Announce what your visitors need to know: a policy change, a holiday shipping cutoff, an age check, or a cookie notice. Each announcement targets the pages and visitors it applies to.
62 62
63 63 * Make Announcements
64 - * COVID-19 Announcement
65 64 * Grow Social Network
66 65 * Show Relevant Content
67 66 * Promote Return Policy
68 67 * [Age Verification Popup](https://www.fireplugins.com/blog/age-verification-in-wordpress/?utm_source=wporg&utm_medium=pluginlisting&utm_campaign=freepluginwporg)
@@ -71,9 +70,9 @@
71 70 * [WordPress Login Popup](https://www.fireplugins.com/blog/create-wordpress-login-popup-modal/?utm_source=wporg&utm_medium=pluginlisting&utm_campaign=freepluginwporg)
72 71
73 72 ### 📝 Connect with Visitors
74 73
75 -Empower visitors to engage with your brand and take action by providing various contact and interaction options with FireBox, the versatile WordPress popup plugin. Whether collecting feedback, booking meetings, offering support, or creating interactive quizzes and surveys, FireBox popup facilitates seamless communication and relationship building.
74 +Let visitors reach you without leaving the page they're on: contact forms, feedback, meeting bookings, quizzes, and surveys, each opening in place.
76 75
77 76 * Contact Form Popup
78 77 * Collect Phone Numbers
79 78 * Book Meetings
@@ -83,9 +82,9 @@
83 82 * Run Surveys
84 83
85 84 ### Campaign Formats
86 85
87 -Choose the perfect popup campaign format to display the most attention-grabbing message to your visitors for maximum engagement. FireBox WordPress popup plugin comes with the following popup formats:
86 +Every campaign picks how it appears on the page. The message and targeting stay the same; the format changes how much attention it asks for:
88 87
89 88 1. **Classic Popup (Lightbox)**: Easily create custom popups to grow your email list, show coupons, make a WooCommerce cross-sell or WooCommerce upsell campaign, and more, using our popup plugin.
90 89 2. **Slide-in Popup:** A high-converting popup format that slides from the bottom of the screen to highlight related WooCommerce products, related posts, and newsletter forms.
91 90 3. **[Fullscreen Popup](https://www.fireplugins.com/blog/create-fullscreen-popup-in-wordpress/?utm_source=wporg&utm_medium=pluginlisting&utm_campaign=freepluginwporg)**: Create full-screen popups and welcome mats to focus your visitor’s attention on your best offer.
@@ -165,15 +164,15 @@
165 164 * **[PHP](https://www.fireplugins.com/docs/display-conditions/the-php-rule/?utm_source=wporg&utm_medium=pluginlisting&utm_campaign=freepluginwporg)** (Pro): Use PHP to create your conditions. The sky’s the limit!
166 165 * **[Time on Site](https://www.fireplugins.com/docs/display-conditions/the-time-on-site-rule/?utm_source=wporg&utm_medium=pluginlisting&utm_campaign=freepluginwporg)** (Pro): Target users who have spent a specific amount of time on the site.
167 166 * **[New/Returning Visitor](https://www.fireplugins.com/docs/display-conditions/the-new-returning-visitor-condition/?utm_source=wporg&utm_medium=pluginlisting&utm_campaign=freepluginwporg)** (Pro): Target new users or returning visitors.
168 167
169 -### All features - A multi-purpose popup plugin
168 +### All features
170 169
171 170 * **Intuitive Visual Editor** – Block-based popup builder that lets you create popups without coding.
172 171 * **Position Everywhere** – Configure your campaign to appear from any corner of your website.
173 172 * **[Popup Gallery](https://www.fireplugins.com/templates/?utm_source=wporg&utm_medium=pluginlisting&utm_campaign=freepluginwporg)** – Ready-to-use, responsive, and highly customizable pre-made popup templates and presets so you can start in just a few minutes.
174 173 * **Forms** – Create beautiful forms to capture leads. Convert visitors into leads and leads into customers. Integrate with your favorite CRM such as MailChimp, SendInBlue, AcyMailing, and more! Use our Zapier Integration to sync your form submissions with 5,000+ apps.
175 -* **Multiple Campaign Types** – Popup, Floating Bar, Notification Bar, Fullscreen Popup, Slide-in Popup—all in one plugin!
174 +* **Multiple Campaign Types** – Popup, Floating Bar, Notification Bar, Fullscreen Popup, Slide-in Popup: all in one plugin!
176 175 * **Precision Targeting** – Every visitor is different. Show targeted campaigns based on the user’s device, the URL they came from, or even their physical location.
177 176 * **Smart Triggers** – Detect visitors' behavior and use smart triggers to display the right campaign to the right person at the right time. Display a popup on page load, click, hover, exit intent, scroll, and even when the user is using an AdBlock extension!
178 177 * **[Analytics](https://www.fireplugins.com/docs/analytics/analytics/?utm_source=wporg&utm_medium=pluginlisting&utm_campaign=freepluginwporg)** – Easily find out which campaigns are converting the most. FireBox tracks the number of times a popup is viewed, the average time each popup is opened, the total form submissions, and the conversion rate.
179 178 * **Actions** (Pro) – Control what happens when a certain campaign event fires in the browser.
@@ -305,22 +304,20 @@
305 304 14. Salesforce Web-to-Lead:
306 305 - Description: Integration to submit form leads to Salesforce Web-to-Lead.
307 306 - Website: https://www.salesforce.com/
308 307
309 -16. Usage Tracking:
308 +15. Usage Tracking:
310 309 - Description: Collects anonymous usage statistics and diagnostic data after the user enables the Usage Tracking option in the FireBox settings. Data helps improve features, stability, and performance; no personal data is collected unless explicitly provided by the user.
311 310 - Website: https://usage.fireboxwp.com/
312 311
313 -If you need links to Terms of Service or Privacy pages for any specific service above, I can add them under each entry.
314 -
315 312 == Screenshots ==
316 313
317 -1. The Dashboard provides an overview of your analytics, latest campaigns, as well as a list of trending popup templates.
318 -2. The Analytics provide a deeper insight on how your campaigns performs on your site.
319 -3. The Campaign Library consists of 300+ pre-made popup templates.
314 +1. The Dashboard: your campaigns, their conversions, and templates to start from.
315 +2. Analytics: views, conversions, and conversion rate per campaign. On Pro, revenue attributed from completed WooCommerce orders.
316 +3. The Campaign Library: 300+ templates, including free shipping bars, cart recovery offers, and email opt-ins.
320 317 4. Format Panel helps you specify your popup's style, position, and trigger.
321 318 5. Set background overlay, and design your popup as desired by customizing the width, height, padding, margin, border, and colors.
322 -6. Easily customize your popup with a plethora of animation effects, opening sounds, and display frequency controls. Trigger popups with floating buttons.
319 +6. Customize your popup with 60+ animation effects, opening sounds, and display frequency controls. Trigger popups with floating buttons.
323 320 7. Choose the close button placement: display it inside the popup, outside the popup, or hide it.
324 321 8. Set the actions your campaign will perform on different events (open, close, conversion, etc...).
325 322 9. Define when your campaign will appear using display conditions, such as everywhere on your site, specific pages, or using advanced Ecommerce conditions.
326 323 10. Run your own PHP code before/after the campaign appears, on open/close of the popup, or perform your own form validations and execute code after form is submitted.
@@ -366,9 +363,92 @@
366 363 = How do I measure WooCommerce campaign impact on revenue? =
367 364
368 365 FireBox includes built-in analytics and revenue attribution for WooCommerce, so you can connect campaigns with real sales outcomes instead of only views or clicks. See our [documentation](https://www.fireplugins.com/docs/?utm_source=wporg&utm_medium=pluginlisting&utm_campaign=freepluginwporg) for setup details and best practices.
369 366
367 += Why isn't my PHP display condition or PHP Script running? =
368 +
369 +Running custom PHP is a powerful, sensitive capability, so FireBox requires a dedicated "run PHP" permission. The PHP in a display condition or PHP Script only runs when the campaign's author has that permission. Administrators have it by default, so campaigns they create work as expected. If a campaign was created by another role (such as an Author) that PHP will not run. An administrator who trusts that role to run code can grant it the permission with a role-editor plugin, or reassign the campaign to an administrator. See our [documentation](https://www.fireplugins.com/docs/?utm_source=wporg&utm_medium=pluginlisting&utm_campaign=freepluginwporg) for details.
370 +
370 371 == Changelog ==
372 +
373 += 3.1.14 - 02/10/2026 =
374 +* Improved security of the "FireBox - Submitted Form" display condition.
375 +
376 += 3.1.13 - 07/09/2026 =
377 +* Improved security across the plugin, including how campaigns are searched, previewed and tracked, how form submissions and integrations are handled, and how visitor information is read.
378 +* Improved: your captcha secret keys and MaxMind license key now stay on the server and are no longer shared with the campaign editor.
379 +* Improved: the {user.*} Smart Tag now only returns profile details such as name and email.
380 +* Improved: stored integration credentials (MailChimp, Brevo, Klaviyo and others) get an extra layer of protection. Existing connections keep working.
381 +* Improved: visitor cookies now work correctly on sites served over plain HTTP.
382 +* Improved: IP and Geolocation conditions now detect a reverse proxy on your own network automatically. If your site sits behind a CDN that does not pass the visitor's address through to WordPress, the new fpframework/trusted_proxies filter lets you tell FireBox about it.
383 +* Improved: the Cloudflare Turnstile and hCaptcha setup notice in the campaign editor now also appears when only the secret key is missing.
384 +* Fixed: the Brevo integration failed to load your contact lists.
385 +
386 += 3.1.12 - 28/08/2026 =
387 +* Fixed an issue in the free version where a campaign using Custom JavaScript could cause an error on the front end.
388 +
389 += 3.1.11 - 26/08/2026 =
390 +* Improved compatibility with WP Rocket: FireBox now automatically excludes its files from Delay JavaScript Execution, minification, and Remove Unused CSS, so campaigns keep working without adding manual exclusions in WP Rocket's settings.
391 +* Improved security: custom PHP in display conditions and PHP Scripts now runs only for campaigns whose author holds a dedicated "run PHP" permission. Administrators have it by default; other roles cannot run PHP unless you grant them the permission deliberately.
392 +* Improved security: custom JavaScript and custom CSS on a campaign now run only for campaigns whose author is allowed to add code. Administrators can by default; other roles cannot add custom code unless you grant them the permission deliberately. Custom CSS is also cleaned so it can't be used to inject anything other than styles.
393 +* Improved security: turning a campaign on or off from the campaigns list now checks that you have permission to edit that specific campaign, and only ever changes FireBox campaigns.
394 +* Improved security: values taken from the current page address and the referring page now have any code removed before they appear inside a campaign, so a crafted link can't inject content into your campaigns.
395 +* Improved security: duplicating a campaign now checks you have permission to edit it, and the copy belongs to whoever created it.
396 +
397 += 3.1.10 - 18/08/2026 =
398 +* WordPress 7.1 compatibility.
399 +* Added: a limit on how many times the same visitor can submit a form each minute, so a single visitor can't spam your submissions list.
400 +* Improved Multisite support: FireBox now sets itself up on every site of a network, including sites added later, so campaigns, analytics and permissions work without visiting each site first.
401 +* Improved Multisite support: campaigns on different sites of a network no longer share cookies, so closing a campaign on one site can't hide a campaign on another.
402 +* Improved Multisite support: removing FireBox from a network now clears each site's data according to that site's own "Keep data on uninstall" setting, and deleting a site removes its FireBox data with it.
403 +* Improved: cookies now follow your site's WordPress cookie settings, so campaign frequency and analytics keep working on sites that share cookies between www and non-www addresses.
404 +* Improved how integration credentials (MailChimp, Brevo, Klaviyo, and others) are stored.
405 +* Improved the handling of imported campaigns so their content is cleaned up before it is saved.
406 +* Improved how Rating field values are shown in the Submissions list.
407 +* Improved: campaigns now use their own set of permissions, so you can give someone access to campaigns without giving them access to all your posts.
408 +* Improved the accuracy of conversion and analytics tracking by ignoring invalid or duplicated data.
409 +* Improved: connecting or disconnecting an integration now requires administrator access.
410 +* Improved how the submissions REST API key is sent and verified.
411 +* Improved security when FireBox checks for updates: it now confirms it is really talking to the FirePlugins license server before downloading anything.
412 +* Improved: WordPress now offers the auto-update option for FireBox in the Plugins list, instead of saying auto-updates are not available.
413 +* Improved privacy: FireBox no longer tells WordPress.org about itself when WordPress checks for plugin updates.
414 +* Improved the handling of the {fbExpr} expression feature.
415 +* Improved the handling of redirects and messages shown after a form is submitted.
416 +* Improved the delete and duplicate actions in the campaigns list.
417 +* Improved: page speed for campaigns with custom JavaScript no longer hold up the rest of the page while FireBox loads. Custom code now runs right after your campaigns are ready.
418 +* Improved: page speed when serving multiple FireBox campaigns on same page.
419 +* Improved: page speed by loading only the animations your campaign uses, instead of the whole animation library. This cuts about 69KB from every page a campaign appears on.
420 +* Fixed: page slide campaigns could appear full-height and outside their slide area on some sites.
421 +* Fixed: an error that could occur while FireBox was updating itself.
422 +
423 += 3.1.9 - 16/07/2026 =
424 +* Added: a new campaigns list with ability to sort, filter, and manage your campaigns in bulk.
425 +* Improved security of visitor cookie handling on campaigns using a daily, weekly, or monthly display frequency.
426 +* Improved security of Phone Number values shown in the Submissions list and in admin notification emails.
427 +* Improved security of the {post.*} and {cookie.*} Smart Tags, which now strip HTML from their values, matching the {querystring.*} Smart Tag.
428 +* Improved: Compatibility of YouTube shorts in the Video block.
429 +* Improved: replaced PHP sessions with cookies on the front-end, restoring full-page caching compatibility and fixing the Site Health "active PHP session" warning and REST API loopback timeouts.
430 +* Improved: cookies are now only set when a campaign actually needs them (e.g. Pageviews condition).
431 +* Improved: the front-end script now loads deferred for faster page rendering.
432 +* Improved: campaign and settings lookups are now cached on sites with a persistent object cache.
433 +* Improved: WordPress 6.3 compatibility.
434 +* Improved: campaign revenue now excludes refunded WooCommerce and Easy Digital Downloads orders, matching your shop's own analytics. Use the firebox/revenue_attribution/order_total filter to restore gross revenue.
435 +* Improved: hardened display-condition, conversion-tracking, geolocation, upgrade, and license handling against unexpected or malformed data.
436 +* Fixed: MailChimp integration removed a subscriber's existing tags and interest groups even when "Replace Tags?" was turned off.
437 +* Fixed: a campaign containing a Heading, Button, or Paragraph block set to a Google font could fail to render on the front-end in some saved or imported campaigns.
438 +* Fixed: submitting a form with an optional Phone Number field, or editing a submission with malformed data, could trigger a PHP error.
439 +* Fixed: exporting campaigns via a malformed request could trigger a PHP error before the security check.
440 +* Fixed: corrected a build marker in the upgrade routine that could mis-package the Free, Basic, and Growth builds.
441 +* Fixed: the Phone Number field appeared unstyled in the block editor due to missing stylesheet.
442 +* Fixed: the Performance chart kept a Weekly or Monthly grouping selected after switching to a shorter timeframe that no longer supports it, now falls back to Daily automatically.
443 +* Fixed: YouTube videos in the Video block failed to load in the block editor preview with "Error 153".
444 +* Fixed: a {cookie.*} Smart Tag referencing a cookie that was not set could blank out the campaign's content.
445 +* Removed: the mini onboarding appearing after the first install.
446 +
447 += 3.1.8 - 15/06/2026 =
448 +* Security: Fixed unauthenticated access to the form submissions CSV export endpoint.
449 +* Fixed: Google Analytics tracking no longer triggers extra page views when tracking popup events.
450 +* Fixed: PHP deprecation notice for fputcsv() during form submissions CSV export on PHP 8.4+.
371 451
372 452 = 3.1.7 - 21/05/2026 =
373 453 * Improved WordPress 7.0 compatibility.
374 454 * Improved styling in responsive controls.