Known vulnerabilities in themeisle Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-11358 | The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin for WordPress is… | 4.4 Medium | Jun 18, 2026 |
| CVE-2025-12045 | The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin for WordPress is… | 6.4 Medium | Nov 4, 2025 |
| CVE-2024-13183 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_tag’… | 6.4 Medium | Jan 10, 2025 |
| CVE-2025-0311 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Pricing… | 6.4 Medium | Jan 10, 2025 |
| CVE-2024-7778 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all… | 6.4 Medium | Aug 22, 2024 |
| CVE-2024-2484 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Services and Post… | 6.4 Medium | Jun 22, 2024 |
| CVE-2024-1499 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing Table… | 6.4 Medium | Mar 13, 2024 |
| CVE-2024-1497 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form widget… | 6.4 Medium | Mar 13, 2024 |
| CVE-2024-2126 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Registration Form… | 6.4 Medium | Mar 13, 2024 |
| CVE-2024-1323 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Post… | 6.4 Medium | Feb 27, 2024 |
| CVE-2024-0508 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Pricing… | 6.4 Medium | Feb 5, 2024 |
| CVE-2024-1162 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and… | 4.3 Medium | Feb 2, 2024 |
| CVE-2024-1047 | Multiple plugins and/or themes for WordPress with the ThemeIsle SDK are vulnerable to unauthorized modification of… | 5.3 Medium | Feb 2, 2024 |
| CVE-2023-6781 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom… | 6.4 Medium | Jan 11, 2024 |
Other themeisle products
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator 17
Orbit Fox by ThemeIsle 15
Multiple Page Generator Plugin – MPG 12
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE 11
Redirection for Contact Form 7 9
Visualizer: Tables and Charts Manager for WordPress 8
PPOM – Product Addons & Custom Fields for WooCommerce 5
Auto Featured Image (Auto Post Thumbnail) 4
Visualizer 4
PPOM for WooCommerce 4
WP Full Stripe Free 4
MPG 3