CVE-2025-10874

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.2 does not limit URLs which may be used for the stock photo import feature, allowing the user to specify arbitrary URLs. This leads to a server-side request forgery as the user m...

CVE-2025-10874 Orbit Fox < 3.0.2 - Author+ Server-Side Request Forgery

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.2 does not limit URLs which may be used for the stock photo import feature, allowing the user to specify arbitrary URLs. This leads to a server-side request forgery as the user m...

CVE-2025-10874 Orbit Fox < 3.0.2 - Author+ Server-Side Request Forgery

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.2 does not limit URLs which may be used for the stock photo import feature, allowing the user to specify arbitrary URLs. This leads to a server-side request forgery as the user m...

EUVD-2025-35800

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.2 does not limit URLs which may be used for the stock photo import feature, allowing the user to specify arbitrary URLs. This leads to a server-side request forgery as the user m...

CVE-2025-10874

The connected Red Hat entry confirms CVE-2025-10874 affects Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More for WordPress and is due to an unrestricted URL in the stock photo import feature that enables server-side request forgery (SSRF) by forcing the serve...

EUVD-2000-0356

Malware in sbrugna...

EUVD-2009-1065

Malware in sbrugna...

EUVD-2000-0357

Malware in sbrugna...

EUVD-2010-2120

Malware in sbrugna...

EUVD-2024-16303

Malicious code in bioql PyPI...

EUVD-2024-27090

Malicious code in bioql PyPI...

EUVD-2024-17081

Malicious code in bioql PyPI...

EUVD-2024-48640

Malicious code in bioql PyPI...

EUVD-2025-8456

Malicious code in bioql PyPI...

EUVD-2024-16931

Malicious code in bioql PyPI...

EUVD-2023-33793

Malicious code in bioql PyPI...

EUVD-2024-51405

Malicious code in bioql PyPI...

EUVD-2025-26572

Malicious code in bioql PyPI...

EUVD-2025-1598

Malicious code in bioql PyPI...

Malicious code in gravity-jest-orbit-dione (npm)

The package gravity-jest-orbit-dione was found to contain malicious code...