Themeisle Orbit Fox vulnerabilities

• themeisle orbit fox by themeisle, orbit fox +1 more WordPress Orbit Fox by ThemeIsle plugin <= 2.10.44 - Cross Site Scripting (XSS) vulnerability CVE-2025-22659 6.5 MediumMarch 27, 2025
• themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag Parameter CVE-2024-13183 6.4 MediumJanuary 10, 2025
• themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget CVE-2025-0311 6.4 MediumJanuary 10, 2025
• themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more Orbit Fox by ThemeIsle <= 2.10.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVE-2024-7778 6.4 MediumAugust 22, 2024
• themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more Orbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid Widgets CVE-2024-2484 6.4 MediumJune 22, 2024
• themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1499 6.4 MediumMarch 13, 2024
• themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via form widget addr2_width attribute CVE-2024-1497 6.4 MediumMarch 13, 2024
• themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more Orbit Fox by ThemeIsle <= 2.10.32 - Authenticated (Contributor+) Stored Cross-Site Scripiting via Registration Form Widget CVE-2024-2126 6.4 MediumMarch 13, 2024
• themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1323 6.4 MediumFebruary 27, 2024
• themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more Orbit Fox by ThemeIsle <= 2.10.27 - Authenticated(Contributor+) Stored Cross-site Scripting via Pricing Table Elementor Widget CVE-2024-0508 6.4 MediumFebruary 5, 2024
• themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more Orbit Fox by ThemeIsle <= 2.10.29 - Cross-Site Request Forgery CVE-2024-1162 4.3 MediumFebruary 2, 2024
• optimole – optimize images in real time, super page cache, rsocial revive social – social media auto post and scheduling automation plugin +10 more +12 more ThemeIsle SDK <= Various Versions - Missing Authorization CVE-2024-1047 5.3 MediumFebruary 2, 2024
• themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more Orbit Fox Companion <= 2.10.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom fields CVE-2023-6781 6.4 MediumJanuary 11, 2024
• themeisle orbit fox by themeisle, orbit fox +1 more Orbit Fox by ThemeIsle < 2.10.3 - Authenticated Privilege Escalation CVE-2021-24158 6.5 MediumApril 5, 2021
• themeisle orbit fox by themeisle, orbit fox +1 more Orbit Fox by ThemeIsle < 2.10.3 - Authenticated Stored Cross Site Scripting CVE-2021-24157 5.4 MediumApril 5, 2021