Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More vulnerabilities

Product

Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More

by · last CVE Sep 9, 2026

CVEs

On KEV

6.1

Max CVSS

New 30D

Vulnerabilities3 In the news0 Timeline

Severity mix

Critical 0High 0Medium 3Low 0

Severity

All severities3 Critical0 High0 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-16583	6.1	0%	Aug 5	Orbit Fox by ThemeIsle < 3.0.8 - Author+ Stored XSS via SVG Upload Affected: 3.0.0 before 3.0.8
CVE-2025-10874	5.5	0%	Oct 24	Orbit Fox < 3.0.2 - Author+ Server-Side Request Forgery Affected: before 3.0.2
CVE-2026-85418	5.4	0%	Sep 9	Orbit Fox < 3.0.9 - Contributor+ Stored XSS via Beaver Builder Pricing Table Widget Affected: before 3.0.9