715 matches found
WordPress Orbit Fox plugin < 3.0.2 - Author+ Server-Side Request Forgery vulnerability
Author+ Server-Side Request Forgery vulnerability discovered by Ryan Roth in WordPress Plugin Orbit Fox by ThemeIsle versions 3.0.2...
CVE-2025-10874
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.2 does not limit URLs which may be used for the stock photo import feature, allowing the user to specify arbitrary URLs. This leads to a server-side request forgery as the user m...
EUVD-2025-35800
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.2 does not limit URLs which may be used for the stock photo import feature, allowing the user to specify arbitrary URLs. This leads to a server-side request forgery as the user m...
CVE-2025-10874 Orbit Fox < 3.0.2 - Author+ Server-Side Request Forgery
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.2 does not limit URLs which may be used for the stock photo import feature, allowing the user to specify arbitrary URLs. This leads to a server-side request forgery as the user m...
CVE-2025-10874 Orbit Fox < 3.0.2 - Author+ Server-Side Request Forgery
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.2 does not limit URLs which may be used for the stock photo import feature, allowing the user to specify arbitrary URLs. This leads to a server-side request forgery as the user m...
CVE-2025-10874
The Orbit Fox WordPress plugin (versions prior to 3.0.2 ) is vulnerable to Server-Side Request Forgery (SSRF) (CWE-918) within its stock photo import feature. The issue resides in the handle-request-mystock-import AJAX action, which fails to sanitize URL parameters, allowing authenticated users w...
CVE-2025-10874: Server-Side Request Forgery (SSRF)
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.2 does not limit URLs which may be used for the stock photo import feature, allowing the user to specify arbitrary URLs. This leads to a server-side request forgery as the user m...
PT-2025-42646
Name of the Vulnerable Software and Affected Versions The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin versions prior to 3.0.2 Description The plugin does not properly restrict URLs used in the stock photo import feature, allowing a user ...
EUVD-2010-2120
Malware in sbrugna...
EUVD-2000-0356
Malware in sbrugna...
EUVD-2000-0357
Malware in sbrugna...
EUVD-2009-1065
Malware in sbrugna...
EUVD-2024-17081
Malicious code in bioql PyPI...
EUVD-2025-8456
Malicious code in bioql PyPI...
EUVD-2023-33793
Malicious code in bioql PyPI...
EUVD-2025-1598
Malicious code in bioql PyPI...
EUVD-2024-51405
Malicious code in bioql PyPI...
EUVD-2024-16303
Malicious code in bioql PyPI...