Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More

Güvenlik açıkları

• CVE-2025-58593giriş gerekir≤ 3.0.0

  WordPress Orbit Fox by ThemeIsle Plugin <= 3.0.0 - Cross Site Scripting (XSS) Vulnerability

  Orta 6.5

• CVE-2025-12045yazar+≤ 3.0.2

  Orbit Fox Companion <= 3.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post Taxonomy

  Orta 6.4

• CVE-2026-65563yazar+≤ 3.0.7

  WordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability

  Orta 5.9

• CVE-2025-22659giriş gerekir≤ 2.10.44

  WordPress Orbit Fox by ThemeIsle plugin <= 2.10.44 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-13183katılımcı+≤ 2.10.43

  Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag Parameter

  Orta 5.4

• CVE-2025-0311katılımcı+≤ 2.10.43

  Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget

  Orta 5.4

• CVE-2024-7778yazar+≤ 2.10.36

  Orbit Fox by ThemeIsle <= 2.10.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

  Orta 5.4

• CVE-2024-2484katılımcı+≤ 2.10.34

  Orbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid Widgets

  Orta 5.4

• CVE-2024-2126katılımcı+≤ 2.10.32

  Orbit Fox by ThemeIsle <= 2.10.32 - Authenticated (Contributor+) Stored Cross-Site Scripiting via Registration Form Widget

  Orta 5.4

• CVE-2024-1499katılımcı+≤ 2.10.30

  Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2024-1497katılımcı+≤ 2.10.30

  Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via form widget addr2_width attribute

  Orta 5.4

• CVE-2024-1323katılımcı+≤ 2.10.31

  Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2024-0508katılımcı+≤ 2.10.27

  Orbit Fox by ThemeIsle <= 2.10.27 - Authenticated(Contributor+) Stored Cross-site Scripting via Pricing Table Elementor Widget

  Orta 5.4

• CVE-2023-6781katılımcı+≤ 2.10.26

  Orbit Fox Companion <= 2.10.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom fields

  Orta 5.4

• CVE-2024-1047kimlik doğrulamasız

  ThemeIsle SDK <= Various Versions - Missing Authorization

  Orta 5.3

• CVE-2026-11358yönetici≤ 3.0.6

  Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More <= 3.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via

  Orta 4.4

• CVE-2024-1162kimlik doğrulamasız · tıklama gerekir≤ 2.10.29

  Orbit Fox by ThemeIsle <= 2.10.29 - Cross-Site Request Forgery

  Orta 4.3