Skip to contentUnknown Orbit Fox: Duplicate Page, Menu Icons, Svg Support, Cookie Notice, Custom Fonts & More vulnerabilities
- unknown orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & moreOrbit Fox < 3.0.9 - Contributor+ Stored XSS via Beaver Builder Pricing Table WidgetCVE-2026-854185.4 Medium
- unknown orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & moreOrbit Fox by ThemeIsle < 3.0.8 - Author+ Stored XSS via SVG UploadCVE-2026-165836.1 Medium
- themeisle orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & moreOrbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More <= 3.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu-item-icon' ParameterCVE-2026-113584.4 Medium
- themeisle orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & moreOrbit Fox Companion <= 3.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post TaxonomyCVE-2025-120456.4 Medium
- unknown orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & moreOrbit Fox < 3.0.2 - Author+ Server-Side Request ForgeryCVE-2025-10874Public exploit5.5 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag ParameterCVE-2024-131836.4 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table WidgetCVE-2025-03116.4 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadCVE-2024-77786.4 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid WidgetsCVE-2024-24846.4 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-14996.4 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via form widget addr2_width attributeCVE-2024-14976.4 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.32 - Authenticated (Contributor+) Stored Cross-Site Scripiting via Registration Form WidgetCVE-2024-21266.4 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-13236.4 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.27 - Authenticated(Contributor+) Stored Cross-site Scripting via Pricing Table Elementor WidgetCVE-2024-05086.4 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.29 - Cross-Site Request ForgeryCVE-2024-11624.3 Medium
- optimole – optimize images in real time, super page cache, rsocial revive social – social media auto post and scheduling automation plugin +10 more +12 moreThemeIsle SDK <= Various Versions - Missing AuthorizationCVE-2024-10475.3 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox Companion <= 2.10.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom fieldsCVE-2023-67816.4 Medium