Known vulnerabilities in Orbit Fox by ThemeIsle
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-65563 | Author Cross Site Scripting (XSS) in Orbit Fox by ThemeIsle <= 3.0.7 versions | 5.9 Medium | Jul 27, 2026 |
| CVE-2025-58593 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Orbit… | 6.5 Medium | Sep 3, 2025 |
| CVE-2025-22659 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Orbit… | 6.5 Medium | Mar 27, 2025 |
| CVE-2024-13183 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_tag’… | 6.4 Medium | Jan 10, 2025 |
| CVE-2025-0311 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Pricing… | 6.4 Medium | Jan 10, 2025 |
| CVE-2024-7778 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all… | 6.4 Medium | Aug 22, 2024 |
| CVE-2024-2484 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Services and Post… | 6.4 Medium | Jun 22, 2024 |
| CVE-2024-1499 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing Table… | 6.4 Medium | Mar 13, 2024 |
| CVE-2024-1497 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form widget… | 6.4 Medium | Mar 13, 2024 |
| CVE-2024-2126 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Registration Form… | 6.4 Medium | Mar 13, 2024 |
| CVE-2024-1323 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Post… | 6.4 Medium | Feb 27, 2024 |
| CVE-2024-0508 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Pricing… | 6.4 Medium | Feb 5, 2024 |
| CVE-2024-1162 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and… | 4.3 Medium | Feb 2, 2024 |
| CVE-2024-1047 | Multiple plugins and/or themes for WordPress with the ThemeIsle SDK are vulnerable to unauthorized modification of… | 5.3 Medium | Feb 2, 2024 |
| CVE-2023-6781 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom… | 6.4 Medium | Jan 11, 2024 |
Other themeisle products
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator 17
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More 14
Multiple Page Generator Plugin – MPG 12
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE 11
Redirection for Contact Form 7 9
Visualizer: Tables and Charts Manager for WordPress 8
PPOM – Product Addons & Custom Fields for WooCommerce 5
Auto Featured Image (Auto Post Thumbnail) 4
Visualizer 4
PPOM for WooCommerce 4
WP Full Stripe Free 4
MPG 3