715 matches found
Malicious Package
Overview bellatrix-resolvers-inquirer-orbit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
CVE-2026-16583
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.8 does not sanitize uploaded SVG files when its SVG upload feature is enabled, allowing authenticated users with the upload capability Author and above by default, without the...
EUVD-2026-53102
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.8 does not sanitize uploaded SVG files when its SVG upload feature is enabled, allowing authenticated users with the upload capability Author and above by default, without the...
CVE-2026-16583 Orbit Fox by ThemeIsle < 3.0.8 - Author+ Stored XSS via SVG Upload
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.8 does not sanitize uploaded SVG files when its SVG upload feature is enabled, allowing authenticated users with the upload capability Author and above by default, without the...
CVE-2026-16583
The Orbit Fox WordPress plugin, versions before 3.0.8 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to sanitize uploaded SVG files when the plugin's SVG upload feature is enabled. This allows authenticated users with upload capabilities (such as Author level a...
CVE-2026-16583 Orbit Fox by ThemeIsle < 3.0.8 - Author+ Stored XSS via SVG Upload
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.8 does not sanitize uploaded SVG files when its SVG upload feature is enabled, allowing authenticated users with the upload capability Author and above by default, without the...
PT-2026-67978
Name of the Vulnerable Software and Affected Versions The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin versions prior to 3.0.8 Description The plugin fails to sanitize uploaded SVG files when the SVG upload feature is enabled. This allows...
CVE-2026-16583: Improper Neutralization of Input During Web Page Generation
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.8 does not sanitize uploaded SVG files when its SVG upload feature is enabled, allowing authenticated users with the upload capability Author and above by default, without the...
SUSE CVE-2026-27806
Fleet is open source device management software. Prior to 4.81.1, the Orbit agent's FileVault disk encryption key rotation flow on collects a local user's password via a GUI dialog and interpolates it directly into a Tcl/expect script executed via exec.Command"expect", "-c", script. Because the...
Malicious Package
Overview hermes-orbit-eslint-config-comet is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
CVE-2026-65563
Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...
EUVD-2026-49236
Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...
CVE-2026-65563
CVE-2026-65563 concerns a Cross Site Scripting (XSS) vulnerability in the WordPress Orbit Fox by ThemeIsle plugin, versioned
CVE-2026-65563
Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...
CVE-2026-65563 WordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability
Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...
CVE-2026-65563 WordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability
Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...
CVE-2026-65563: Improper Neutralization of Input During Web Page Generation
Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...
PT-2026-64955
Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...
WordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Orbit Fox by ThemeIsle versions = 3.0.7...