Skip to content
Noroxi

Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More

themeisle-companion · plugin

Known security vulnerabilities for Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More. Find out in seconds which version runs on your site with WP Lens.

17 known vulnerabilities

latest Jul 27, 2026

Vulnerabilities

  • CVE-2025-58593

    WordPress Orbit Fox by ThemeIsle Plugin <= 3.0.0 - Cross Site Scripting (XSS) Vulnerability

    Medium 6.5

  • CVE-2025-12045

    Orbit Fox Companion <= 3.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post Taxonomy

    Medium 6.4

  • CVE-2026-65563

    WordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability

    Medium 5.9

  • CVE-2025-22659

    WordPress Orbit Fox by ThemeIsle plugin <= 2.10.44 - Cross Site Scripting (XSS) vulnerability

    Medium 5.4

  • CVE-2024-13183

    Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag Parameter

    Medium 5.4

  • CVE-2025-0311

    Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget

    Medium 5.4

  • CVE-2024-7778

    Orbit Fox by ThemeIsle <= 2.10.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    Medium 5.4

  • CVE-2024-2484

    Orbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid Widgets

    Medium 5.4

  • CVE-2024-2126

    Orbit Fox by ThemeIsle <= 2.10.32 - Authenticated (Contributor+) Stored Cross-Site Scripiting via Registration Form Widget

    Medium 5.4

  • CVE-2024-1499

    Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2024-1497

    Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via form widget addr2_width attribute

    Medium 5.4

  • CVE-2024-1323

    Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2024-0508

    Orbit Fox by ThemeIsle <= 2.10.27 - Authenticated(Contributor+) Stored Cross-site Scripting via Pricing Table Elementor Widget

    Medium 5.4

  • CVE-2023-6781

    Orbit Fox Companion <= 2.10.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom fields

    Medium 5.4

  • CVE-2024-1047

    ThemeIsle SDK <= Various Versions - Missing Authorization

    Medium 5.3

  • CVE-2026-11358

    Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More <= 3.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via

    Medium 4.4

  • CVE-2024-1162

    Orbit Fox by ThemeIsle <= 2.10.29 - Cross-Site Request Forgery

    Medium 4.3

← Back to directory