Skip to content
Unknown Svg Support vulnerabilities
-
unknown orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more
Orbit Fox < 3.0.9 - Contributor+ Stored XSS via Beaver Builder Pricing Table Widget
CVE-2026-85418
5.4 Medium
-
unknown orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more
Orbit Fox by ThemeIsle < 3.0.8 - Author+ Stored XSS via SVG Upload
CVE-2026-16583
6.1 Medium
-
unknown svg support
SVG Support < 2.5.17 - Author+ Stored XSS via .svgz Sanitization Bypass
CVE-2026-13340
6.1 Medium
-
themeisle orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More <= 3.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu-item-icon' Parameter
CVE-2026-11358
4.4 Medium
-
benbodhi svg support
WordPress SVG Support plugin <= 2.5.14 - Broken Access Control vulnerability
CVE-2026-48973
4.3 Medium
-
benjamin zekavica easy svg support
Easy SVG Support <= 4.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2025-12451
4.4 Medium
-
themeisle orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more
Orbit Fox Companion <= 3.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post Taxonomy
CVE-2025-12045
6.4 Medium
-
unknown orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more
Orbit Fox < 3.0.2 - Author+ Server-Side Request Forgery
CVE-2025-10874
Public exploit
5.5 Medium
-
inventivo, unknown add svg support for media uploader | inventivo +1 more
Add SVG Support for Media Uploader | inventivo <= 1.0.5 - Author+ Stored XSS via SVG
CVE-2023-7088
5.4 Medium
-
benbodhi svg support
SVG Support <= 2.5.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-10222
6.4 Medium
-
themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more
Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag Parameter
CVE-2024-13183
6.4 Medium
-
themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more
Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget
CVE-2025-0311
6.4 Medium
-
benjamin zekavica easy svg support
Easy SVG Support <= 3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-10269
6.4 Medium
-
themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more
Orbit Fox by ThemeIsle <= 2.10.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-7778
6.4 Medium
-
benbodhi svg support
SVG Support <= 2.5.7 - Authenticated (Author+) Cross-Site Scripting via SVG
CVE-2023-6708
5.4 Medium
-
unknown webp & svg support, rezakhan995 webp \& svg support, webp and svg support and svg support +2 more
WebP & SVG Support <= 1.4.0 - Author+ Stored XSS via SVG
CVE-2024-3633
5.4 Medium
-
themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more
Orbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid Widgets
CVE-2024-2484
6.4 Medium
-
themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more
Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-1499
6.4 Medium
-
themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more
Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via form widget addr2_width attribute
CVE-2024-1497
6.4 Medium
-
themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more
Orbit Fox by ThemeIsle <= 2.10.32 - Authenticated (Contributor+) Stored Cross-Site Scripiting via Registration Form Widget
CVE-2024-2126
6.4 Medium
-
themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more
Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-1323
6.4 Medium
-
themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more
Orbit Fox by ThemeIsle <= 2.10.27 - Authenticated(Contributor+) Stored Cross-site Scripting via Pricing Table Elementor Widget
CVE-2024-0508
6.4 Medium
-
themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more
Orbit Fox by ThemeIsle <= 2.10.29 - Cross-Site Request Forgery
CVE-2024-1162
4.3 Medium
-
optimole – optimize images in real time, super page cache, rsocial revive social – social media auto post and scheduling automation plugin +10 more +12 more
ThemeIsle SDK <= Various Versions - Missing Authorization
CVE-2024-1047
5.3 Medium
-
themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 more
Orbit Fox Companion <= 2.10.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom fields
CVE-2023-6781
6.4 Medium
-
benbodhi svg support
The SVG Support plugin for WordPress defaults to insecure settings in version 2.5 and 2.5.1. SVG...
CVE-2022-4022
6.4 Medium
-
benbodhi svg support
SVG Support < 2.5 - Author+ Stored Cross-Site Scripting
CVE-2022-1755
5.4 Medium
-
easy svg support project svg support, unknown easy svg support +1 more
Easy SVG Support < 3.3.0 - Author+ Stored Cross Site Scripting via SVG
CVE-2022-1964
5.4 Medium