CVE-2025-22659: WordPress Orbit Fox by ThemeIsle plugin <= 2.10.44 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Orbit Fox by ThemeIsle themeisle-companion allows Stored XSS.This issue affects Orbit Fox by ThemeIsle: from n/a through <= 2.10.44.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22659?
CVE-2025-22659 is classified as a high severity vulnerability due to its potential for Stored XSS attacks.
How do I fix CVE-2025-22659?
To fix CVE-2025-22659, update Orbit Fox by ThemeIsle to version 2.10.45 or later.
What types of applications are affected by CVE-2025-22659?
CVE-2025-22659 affects Orbit Fox by ThemeIsle versions up to and including 2.10.44.
What is Stored XSS in relation to CVE-2025-22659?
Stored XSS allows attackers to inject malicious scripts that are stored on the server and executed in the browser of users accessing the affected web application.
Who is the vendor responsible for CVE-2025-22659?
The vendor responsible for CVE-2025-22659 is ThemeIsle, the developer of Orbit Fox.