Orbit Fox by ThemeIsle

Themeisle

Developer

3.0.9

Latest version

100,000

Installations

No date

Last updated

WordPress Plugin

No VDP

Claim ownership

Report vulnerability

Vulnerabilities

Security Contributors

Vulnerability history

0 present

21 patched

3 Mitigation rules

Cross Site Scripting (XSS) vulnerability
<= 3.0.7
24/07/2026
Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability
<= 3.0.6
17/06/2026
Authenticated (Contributor+) Stored Cross-Site Scripting via form widget addr2_width attribute vulnerability
<= 2.10.30
02/02/2026
Authenticated (Author+) Stored Cross-Site Scripting via Post Taxonomy vulnerability
<= 3.0.2
04/11/2025
Author+ Server-Side Request Forgery vulnerability
< 3.0.2
24/10/2025
Cross Site Scripting (XSS) Vulnerability
<= 3.0.0
03/09/2025
Cross Site Scripting (XSS) vulnerability
<= 2.10.44
03/02/2025
Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag Parameter vulnerability
<= 2.10.43
10/01/2025
Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget vulnerability
<= 2.10.43
09/01/2025
Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability
<= 2.10.36
22/08/2024
Authenticated Stored Cross-Site Scripting vulnerability
<= 2.10.34
21/06/2024
Authenticated (Contributor+) Stored Cross-Site Scripiting via Registration Form Widget vulnerability
<= 2.10.32
08/03/2024
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
<= 2.10.31
26/02/2024
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
<= 2.10.30
26/02/2024
Missing Authorization vulnerability
<= 2.10.28
02/02/2024
Cross-Site Request Forgery vulnerability
<= 2.10.29
02/02/2024
Authenticated(Contributor+) Stored Cross-site Scripting via Pricing Table Elementor Widget vulnerability
<= 2.10.27
16/01/2024
Authenticated (Contributor+) Stored Cross-Site Scripting via custom fields vulnerability
<= 2.10.26
08/01/2024
Author+ Server-Side Request Forgery (SSRF) vulnerability
< 2.10.24
27/04/2023
Authenticated Privilege Escalation vulnerability
<= 2.10.2
12/01/2021
Authenticated Stored Cross-Site Scripting (XSS) vulnerability
<= 2.10.2
12/01/2021