ThemeIsle Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More
CVE-2026-11358Medium 4.4Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More <= 3.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu-item-icon' Parameter0.3%
CVE-2025-12045Medium 6.4Orbit Fox Companion <= 3.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post Taxonomy0.2%
CVE-2024-13183Medium 6.4Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag Parameter0.5%
CVE-2025-0311Medium 6.4Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget0.4%
CVE-2024-7778Medium 6.4Orbit Fox by ThemeIsle <= 2.10.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload0.3%
CVE-2024-2484Medium 6.4Orbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid Widgets0.4%
CVE-2024-1499Medium 6.4Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting0.5%
CVE-2024-1497Medium 6.4Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via form widget addr2_width attribute0.5%
CVE-2024-2126Medium 6.4Orbit Fox by ThemeIsle <= 2.10.32 - Authenticated (Contributor+) Stored Cross-Site Scripiting via Registration Form Widget0.4%
CVE-2024-1323Medium 6.4Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting0.5%
CVE-2024-0508Medium 6.4Orbit Fox by ThemeIsle <= 2.10.27 - Authenticated(Contributor+) Stored Cross-site Scripting via Pricing Table Elementor Widget0.5%
CVE-2024-1162Medium 4.3Orbit Fox by ThemeIsle <= 2.10.29 - Cross-Site Request Forgery0.2%
CVE-2024-1047Medium 5.3ThemeIsle SDK <= Various Versions - Missing Authorization0.6%
CVE-2023-6781Medium 6.4Orbit Fox Companion <= 2.10.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom fields0.4%