701 matches found
EUVD-2026-74720
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.9 does not validate a user-supplied HTML tag name in one of its Beaver Builder widgets before echoing it into the rendered markup, allowing users with contributor-level access an...
CVE-2026-85418 Orbit Fox < 3.0.9 - Contributor+ Stored XSS via Beaver Builder Pricing Table Widget
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.9 does not validate a user-supplied HTML tag name in one of its Beaver Builder widgets before echoing it into the rendered markup, allowing users with contributor-level access an...
CVE-2023-20198
CVE-2023-20198 CVE-2023-20198 Checkscript based on: https://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/ Including the updated where there is an Authorization header to check for the known implant. !! Upgraded to look for upgraded implant The script checks length of...
CVE-2025-14156
CVE-2025-14156 Fox LMS – Plugin LMS para WordPress 1.0.4.7 - 1.0.5.1 - Escalada de Privilegios no Autenticada mediante 'createOrder' ⚠️ CVE-2025-14156 – Exploit de Escalada de Privilegios no Autenticada en Fox LMS para WordPress 🛡️ Resumen de la Vulnerabilidad Fox LMS – Plugin LMS para WordPress...
CVE-2026-16583
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.8 does not sanitize uploaded SVG files when its SVG upload feature is enabled, allowing authenticated users with the upload capability Author and above by default, without the...
EUVD-2026-53102
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.8 does not sanitize uploaded SVG files when its SVG upload feature is enabled, allowing authenticated users with the upload capability Author and above by default, without the...
CVE-2026-16583 Orbit Fox by ThemeIsle < 3.0.8 - Author+ Stored XSS via SVG Upload
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.8 does not sanitize uploaded SVG files when its SVG upload feature is enabled, allowing authenticated users with the upload capability Author and above by default, without the...
CVE-2026-16583
CVE-2026-16583 affects the Orbit Fox by ThemeIsle WordPress plugin prior to 3.0.8. The SVG upload feature does not sanitize uploaded SVG files, enabling stored XSS: authenticated users with upload capability (Author and above by default, without unfiltered_html) can upload SVGs containing JavaScr...
Silver Fox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT
The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerable driver BYOVD attacks targeting a Japanese organization in the industrial manufacturing sector to ultimately deliver ValleyRAT aka Winos 4.0 for persistent remote access. "In...
CVE-2026-65563
Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...
CVE-2026-65563
CVE-2026-65563 concerns a Cross Site Scripting (XSS) vulnerability in the WordPress Orbit Fox by ThemeIsle plugin, versioned
CVE-2026-65563 WordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability
Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...
CVE-2026-65563
Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...
EUVD-2026-49236
Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...
WordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Orbit Fox by ThemeIsle versions = 3.0.7...
New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic
The China-linked cybercrime group known as Silver Fox has been attributed to a new Rust-based remote access trojan RAR called MODBEACON. Chinese cybersecurity company QiAnXin said that while the threat cluster may appear like a low-sophistication, high-activity operation that propagates malware v...
CVE-2026-57319
Unauthenticated Cross Site Scripting XSS in FOX = 1.4.8 versions...
EUVD-2026-39732
Unauthenticated Cross Site Scripting XSS in FOX = 1.4.8 versions...
CVE-2026-57319
The CVE-2026-57319 entry affects the WordPress FOX plugin up to version 1.4.8, with an unauthenticated Cross-Site Scripting (XSS) vulnerability. The connected sources confirm the affected product and vulnerability class but do not specify the root cause details, exploit conditions, or remediation...