Lucene search
+L

627 matches found

Wired Threat Level
Wired Threat Level
added 2024/04/27 10:00 a.m.11 views

Russia Vetoed a UN Resolution to Ban Space Nukes

A ban on weapons of mass destruction in orbit has stood since 1967. Russia apparently has other ideas...

7.3AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
added 2024/04/13 11:30 a.m.23 views

Space Force Is Planning a Military Exercise in Orbit

Two satellites will engage in a “realistic threat response scenario” when Victus Haze gets underway...

7.3AI score
SaveExploits0
OSV
OSV
added 2024/03/13 4:15 p.m.8 views

CVE-2024-2126

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Registration Form widget in all versions up to, and including, 2.10.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

5.4CVSS5.9AI score0.00423EPSS
SaveExploits0References2
NVD
NVD
added 2024/03/13 4:15 p.m.27 views

CVE-2024-2126

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Registration Form widget in all versions up to, and including, 2.10.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS5.7AI score0.00423EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/13 4:15 p.m.10 views

CVE-2024-1497

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form widget addr2width attribute in all versions up to, and including, 2.10.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

5.4CVSS6AI score0.00532EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/13 4:15 p.m.9 views

CVE-2024-1499

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing Table widget in the $settings'titletags' parameter in all versions up to, and including, 2.10.30 due to insufficient input sanitization and output escaping. This makes it possible for...

5.4CVSS6AI score0.00532EPSS
SaveExploits0References3
Prion
Prion
added 2024/03/13 4:15 p.m.24 views

Cross site scripting

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Registration Form widget in all versions up to, and including, 2.10.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

5.5CVSS6AI score0.00423EPSS
SaveExploits0References2
Prion
Prion
added 2024/03/13 4:15 p.m.24 views

Cross site scripting

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form widget addr2width attribute in all versions up to, and including, 2.10.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

5.5CVSS6AI score0.00532EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/03/13 3:27 p.m.30 views

CVE-2024-1499 Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing Table widget in the $settings'titletags' parameter in all versions up to, and including, 2.10.30 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS5.9AI score0.00532EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/03/13 3:27 p.m.13 views

CVE-2024-1499 Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing Table widget in the $settings'titletags' parameter in all versions up to, and including, 2.10.30 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS7AI score0.00532EPSS
SaveExploits0References3
CVE
CVE
added 2024/03/13 3:27 p.m.64 views

CVE-2024-1499

CVE-2024-1499 affects Orbit Fox by ThemeIsle (WordPress plugin) up to version 2.10.30, with Stored XSS in the Pricing Table widget via the $settings['title_tags'] field caused by insufficient input sanitization and output escaping. Exploitation is possible by authenticated users with contributor ...

6.4CVSS6.1AI score0.00532EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2024/03/13 3:27 p.m.32 views

CVE-2024-1497 Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via form widget addr2_width attribute

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form widget addr2width attribute in all versions up to, and including, 2.10.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS5.8AI score0.00532EPSS
SaveExploits0References3
CVE
CVE
added 2024/03/13 3:27 p.m.71 views

CVE-2024-1497

The CVE-2024-1497 entry concerns the Orbit Fox by ThemeIsle WordPress plugin. A Stored Cross-Site Scripting (XSS) vulnerability exists in the addr2_width attribute of the form widget, across all versions up to and including 2.10.30, caused by insufficient input sanitization and output escaping. E...

6.4CVSS6.1AI score0.00532EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/13 3:27 p.m.17 views

CVE-2024-1497 Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via form widget addr2_width attribute

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form widget addr2width attribute in all versions up to, and including, 2.10.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS7AI score0.00532EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/03/13 3:26 p.m.15 views

CVE-2024-2126 Orbit Fox by ThemeIsle <= 2.10.32 - Authenticated (Contributor+) Stored Cross-Site Scripiting via Registration Form Widget

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Registration Form widget in all versions up to, and including, 2.10.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS7AI score0.00423EPSS
SaveExploits0References2
CVE
CVE
added 2024/03/13 3:26 p.m.68 views

CVE-2024-2126

The CVE-2024-2126 entry concerns Orbit Fox by ThemeIsle (WordPress plugin). A Stored Cross-Site Scripting (XSS) flaw exists in the Registration Form Widget across all versions up to and including 2.10.32, caused by insufficient input sanitization and output escaping. Exploitation requires authent...

6.4CVSS6.1AI score0.00423EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/03/13 12:00 a.m.8 views

WordPress Plugin Orbit Fox by ThemeIsle Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.4CVSS5.8AI score0.00532EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/03/13 12:00 a.m.10 views

WordPress Plugin Orbit Fox by ThemeIsle Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.4CVSS5.8AI score0.00532EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/03/13 12:00 a.m.11 views

PT-2024-18094 · Themeisle · Orbit Fox

Name of the Vulnerable Software and Affected Versions: The Orbit Fox by ThemeIsle plugin for WordPress versions up to, and including, 2.10.30 Description: The issue is related to Stored Cross-Site Scripting via the Pricing Table widget in the $settings'title tags' parameter due to insufficient...

6.4CVSS8AI score0.00532EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/03/13 12:00 a.m.10 views

PT-2024-18092 · Themeisle · Orbit Fox

Name of the Vulnerable Software and Affected Versions: The Orbit Fox by ThemeIsle plugin for WordPress versions up to, and including, 2.10.30 Description: The issue is related to Stored Cross-Site Scripting via the form widget addr2 width attribute due to insufficient input sanitization and outpu...

6.4CVSS8AI score0.00532EPSS
SaveExploits0References7
Rows per page
Query Builder