CVE-2026-65563 Author Cross Site Scripting (XSS) in Orbit Fox by ThemeIsle <= 3.0.7 versions

Description

Author Cross Site Scripting (XSS) in Orbit Fox by ThemeIsle <= 3.0.7 versions.

Affected products and versions

Product	Affected versions	Fixed in
Orbit Fox by ThemeIsle 3.0	earliest → 3.0.7	No fix stated

Other CVEs of Orbit Fox by ThemeIsle

The 15 CVEs of Orbit Fox by ThemeIsle →

CVE-2025-58593 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Orbit… 6.5 Medium CVE-2025-22659 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Orbit… 6.5 Medium CVE-2024-13183 The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_tag’… 6.4 Medium CVE-2025-0311 The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Pricing… 6.4 Medium