5.3
Moyenne
CVE-2024-1047 Multiple plugins and/or themes for WordPress with the ThemeIsle SDK are vulnerable to unauthorized modification of…
Description
Multiple plugins and/or themes for WordPress with the ThemeIsle SDK are vulnerable to unauthorized modification of data due to a missing capability check on the register_reference() function in various versions. This makes it possible for unauthenticated attackers to update options values that allow ThemeIsle to track promotional activities via utm_source.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Orbit Fox by ThemeIsle 2.10 | premières → 2.10.28 | Pas de correctif indiqué |
| Menu Icons by ThemeIsle 0.13 | premières → 0.13.8 | Pas de correctif indiqué |
| Starter Sites & Templates by Neve 1.2 | premières → 1.2.6 | Pas de correctif indiqué |
| Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE 2.6 | premières → 2.6.2 | Pas de correctif indiqué |
| LightStart – Maintenance Mode, Coming Soon and Landing Page Builder 2.6 | premières → 2.6.9 | Pas de correctif indiqué |
| Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More 2.10 | premières → 2.10.28 | Pas de correctif indiqué |
| Multiple Page Generator Plugin – MPG 3.4 | premières → 3.4.0 | Pas de correctif indiqué |
| Visualizer: Tables and Charts Manager for WordPress 3.10 | premières → 3.10.6 | Pas de correctif indiqué |
| Optimole – Optimize Images in Real Time 3.12 | premières → 3.12.4 | Pas de correctif indiqué |
Afficher les 4 autres branches Masquer les 4 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator 4.4 | premières → 4.4.1 | Pas de correctif indiqué |
| Super Page Cache 4.7 | premières → 4.7.5 | Pas de correctif indiqué |
| Revive Social – Social Media Auto Post and Scheduling Automation Plugin 9.0 | premières → 9.0.25 | Pas de correctif indiqué |
| PPOM – Product Addons & Custom Fields for WooCommerce 32.0 | premières → 32.0.9 | Pas de correctif indiqué |
Autres CVE de Orbit Fox by ThemeIsle
Les 15 CVE de Orbit Fox by ThemeIsle →
CVE-2026-65563
Author Cross Site Scripting (XSS) in Orbit Fox by ThemeIsle <= 3.0.7 versions
5.9
Moyenne
CVE-2025-58593
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Orbit…
6.5
Moyenne
CVE-2025-22659
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Orbit…
6.5
Moyenne
CVE-2024-13183
The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_tag’…
6.4
Moyenne