Orbit Fox by ThemeIsle
Themeisle
Developer
3.0.5
Latest version
100,000
Installations
No date
Last updated
Vulnerability history
0 present
19 patched
3 Mitigation rules
- Authenticated (Contributor+) Stored Cross-Site Scripting via form widget addr2_width attribute vulnerability<= 2.10.3002/02/2026
- Authenticated (Author+) Stored Cross-Site Scripting via Post Taxonomy vulnerability<= 3.0.204/11/2025
- Author+ Server-Side Request Forgery vulnerability< 3.0.224/10/2025
- Cross Site Scripting (XSS) Vulnerability<= 3.0.003/09/2025
- Cross Site Scripting (XSS) vulnerability<= 2.10.4403/02/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag Parameter vulnerability<= 2.10.4310/01/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget vulnerability<= 2.10.4309/01/2025
- Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability<= 2.10.3622/08/2024
- Authenticated Stored Cross-Site Scripting vulnerability<= 2.10.3421/06/2024
- Authenticated (Contributor+) Stored Cross-Site Scripiting via Registration Form Widget vulnerability<= 2.10.3208/03/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.10.3126/02/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.10.3026/02/2024
- Missing Authorization vulnerability<= 2.10.2802/02/2024
- Cross-Site Request Forgery vulnerability<= 2.10.2902/02/2024
- Authenticated(Contributor+) Stored Cross-site Scripting via Pricing Table Elementor Widget vulnerability<= 2.10.2716/01/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via custom fields vulnerability<= 2.10.2608/01/2024
- Author+ Server-Side Request Forgery (SSRF) vulnerability< 2.10.2427/04/2023
- Authenticated Privilege Escalation vulnerability<= 2.10.212/01/2021
- Authenticated Stored Cross-Site Scripting (XSS) vulnerability<= 2.10.212/01/2021