Orbit Fox vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

OF

Product

Orbit Fox

by Themeisle · last CVE Mar 27, 2025

15

CVEs

0

On KEV

6.5

Max CVSS

0

New 30D

Vulnerabilities15 In the news0 Timeline

Severity mix

Critical 0High 0Medium 15Low 0

Severity

All severities15 Critical0 High0 Medium15 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Orbit Fox to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-24158	6.5	1%	Apr 5	Orbit Fox by ThemeIsle has a feature to add a registration form to both the Elementor and Beaver Builder page builders functionality Affected: before 2.10.3
CVE-2025-22659	5.4	0%	Mar 27	WordPress Orbit Fox by ThemeIsle plugin <= 2.10.44 - Cross Site Scripting (XSS) vulnerability Affected: through 2.10.44
CVE-2024-13183	5.4	0%	Jan 10	Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag Parameter Affected: before 2.10.44
CVE-2025-0311	5.4	0%	Jan 10	Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget Affected: before 2.10.44
CVE-2024-7778	5.4	0%	Aug 22	Orbit Fox by ThemeIsle <= 2.10.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload Affected: before 2.10.37
CVE-2024-2484	5.4	0%	Jun 22	Orbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid Widgets Affected: before 2.10.35
CVE-2024-1499	5.4	1%	Mar 13	Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 2.10.31
CVE-2024-1497	5.4	1%	Mar 13	Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via form widget addr2_width attribute Affected: before 2.10.31
CVE-2024-2126	5.4	0%	Mar 13	Orbit Fox by ThemeIsle <= 2.10.32 - Authenticated (Contributor+) Stored Cross-Site Scripiting via Registration Form Widget Affected: before 2.10.33
CVE-2024-1323	5.4	0%	Feb 27	Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 2.10.31
CVE-2024-0508	5.4	1%	Feb 5	Orbit Fox by ThemeIsle <= 2.10.27 - Authenticated(Contributor+) Stored Cross-site Scripting via Pricing Table Elementor Widget Affected: through 2.10.27
CVE-2023-6781	5.4	0%	Jan 11	Orbit Fox Companion <= 2.10.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom fields Affected: through 2.10.26
CVE-2021-24157	5.4	1%	Apr 5	Orbit Fox by ThemeIsle has a feature to add custom scripts to the header and footer of a page or post Affected: before 2.10.3
CVE-2024-1047	5.3	1%	Feb 2	ThemeIsle SDK <= Various Versions - Missing Authorization Affected: through 2.10.28
CVE-2024-1162	4.3	0%	Feb 2	Orbit Fox by ThemeIsle <= 2.10.29 - Cross-Site Request Forgery Affected: through 2.10.29