Where
-Infinity
0

Trending

Last week
Last month
Last year

Themeisle Orbit FoxWordPress Orbit Fox by ThemeIsle plugin <= 2.10.44 - Cross Site Scripting (XSS) vulnerability

Risk 34
Severity
6.5
First published (updated )
CVE-2025-22659

Themeisle Orbit Fox WordpressOrbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag Parameter

Risk 39
Severity
6.4
First published (updated )
CVE-2024-13183

Themeisle Orbit Fox WordpressOrbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget

Risk 28
Severity
6.4
EPSS
0.06%
First published (updated )
CVE-2025-0311

Themeisle Orbit Fox WordpressOrbit Fox by ThemeIsle <= 2.10.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

Risk 28
Severity
6.4
EPSS
0.05%
First published (updated )
CVE-2024-7778

Themeisle Orbit Fox WordpressOrbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid Widgets

Risk 39
Severity
6.4
First published (updated )
CVE-2024-2484
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Themeisle Orbit FoxOrbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting

Risk 39
Severity
6.4
First published (updated )
CVE-2024-1499

Themeisle Orbit FoxOrbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via form widget addr2_width attribute

Risk 39
Severity
6.4
First published (updated )
CVE-2024-1497

Themeisle Orbit FoxOrbit Fox by ThemeIsle <= 2.10.32 - Authenticated (Contributor+) Stored Cross-Site Scripiting via Registration Form Widget

Risk 39
Severity
6.4
First published (updated )
CVE-2024-2126

Themeisle Orbit Fox WordpressOrbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting

Risk 39
Severity
6.4
First published (updated )
CVE-2024-1323

Themeisle Orbit Fox WordpressOrbit Fox by ThemeIsle <= 2.10.27 - Authenticated(Contributor+) Stored Cross-site Scripting via Pricing Table Elementor Widget

Risk 28
Severity
6.4
EPSS
0.05%
First published (updated )
CVE-2024-0508
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Themeisle Orbit Fox WordpressOrbit Fox by ThemeIsle <= 2.10.29 - Cross-Site Request Forgery

Risk 16
Severity
4.3
EPSS
0.05%
First published (updated )
CVE-2024-1162

Themeisle Orbit Fox WordpressThemeIsle SDK <= Various Versions - Missing Authorization

Risk 19
Severity
5.3
EPSS
0.07%
First published (updated )
CVE-2024-1047

Themeisle Orbit Fox WordpressOrbit Fox Companion <= 2.10.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom fields

Risk 28
Severity
6.4
EPSS
0.05%
First published (updated )
CVE-2023-6781

Themeisle Orbit Fox WordpressOrbit Fox by ThemeIsle < 2.10.3 - Authenticated Privilege Escalation

Risk 38
Severity
6.5
First published (updated )
CVE-2021-24158

Themeisle Orbit Fox WordpressOrbit Fox by ThemeIsle < 2.10.3 - Authenticated Stored Cross Site Scripting

Risk 34
Severity
5.4
First published (updated )
CVE-2021-24157
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203