Orbit Fox vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

OF

Product

Orbit Fox

by Themeisle · last CVE Mar 27, 2025

15

CVEs

0

On KEV

6.5

Max CVSS

0

New 30D

Vulnerabilities15 In the news0 Timeline

Severity mix

Critical 0High 0Medium 15Low 0

Severity

All severities15 Critical0 High0 Medium15 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Orbit Fox to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-24158	6.5	1%	Apr 5	Orbit Fox by ThemeIsle has a feature to add a registration form to both the Elementor and Beaver Builder page builders functionality Affected: before 2.10.3
CVE-2025-22659	5.4	0%	Mar 27	WordPress Orbit Fox by ThemeIsle plugin <= 2.10.44 - Cross Site Scripting (XSS) vulnerability Affected: through 2.10.44
CVE-2024-13183	5.4	0%	Jan 10	Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag Parameter Affected: before 2.10.44
CVE-2025-0311	5.4	0%	Jan 10	Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget Affected: before 2.10.44
CVE-2024-7778	5.4	0%	Aug 22	The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.10.36 due to insufficient… Affected: before 2.10.37
CVE-2024-2484	5.4	0%	Jun 22	The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Services and Post Type Grid widgets in all versions up to, and including,… Affected: before 2.10.35
CVE-2024-2126	5.4	0%	Mar 13	The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Registration Form widget in all versions up to, and including, 2.10.32 due to… Affected: before 2.10.33
CVE-2024-1499	5.4	1%	Mar 13	The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing Table widget in the $settings['title_tags'] parameter in all versions… Affected: before 2.10.31
CVE-2024-1497	5.4	1%	Mar 13	The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form widget addr2_width attribute in all versions up to, and including,… Affected: before 2.10.31
CVE-2024-1323	5.4	0%	Feb 27	The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Post Type Grid Widget Title in all versions up to, and including,… Affected: before 2.10.31
CVE-2024-0508	5.4	1%	Feb 5	The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Pricing Table Elementor Widget in all versions up to, and including,… Affected: through 2.10.27
CVE-2023-6781	5.4	0%	Jan 11	The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom fields in all versions up to, and including, 2.10.26 due to… Affected: through 2.10.26
CVE-2021-24157	5.4	1%	Apr 5	Orbit Fox by ThemeIsle has a feature to add custom scripts to the header and footer of a page or post Affected: before 2.10.3
CVE-2024-1047	5.3	1%	Feb 2	Multiple plugins and/or themes for WordPress with the ThemeIsle SDK are vulnerable to unauthorized modification of data due to a missing capability check on the… Affected: through 2.10.28
CVE-2024-1162	4.3	0%	Feb 2	The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.10.29 Affected: through 2.10.29