626 matches found
PT-2025-2041 · Themeisle · Orbit Fox
Name of the Vulnerable Software and Affected Versions: Orbit Fox by ThemeIsle plugin for WordPress versions up to, and including, 2.10.43 Description: The issue is related to Stored Cross-Site Scripting via the title tag parameter due to insufficient input sanitization and output escaping. This...
WordPress plugin Orbit Fox by ThemeIsle 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...
WordPress Orbit Fox by ThemeIsle plugin <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Pricing Table Widget vulnerability discovered by Webbernaut in WordPress Plugin Orbit Fox by ThemeIsle versions = 2.10.43...
MAL-2024-11771 Malicious code in orbit-playroom (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e31235ced932a06aa97ace0640c50400f6a56221e702267eeff05b03eb7fa21a The OpenSSF Package Analysis project identified 'orbit-playroom' @ 0.0.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in orbit-playroom (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e31235ced932a06aa97ace0640c50400f6a56221e702267eeff05b03eb7fa21a The OpenSSF Package Analysis project identified 'orbit-playroom' @ 0.0.1 npm as malicious. It is considered malicious because: - The package...
CVE-2024-7778
CVE-2024-7778 affects Orbit Fox by ThemeIsle for WordPress. It is a Stored XSS via SVG file uploads in all versions up to and including 2.10.36 due to insufficient input sanitization and output escaping. Exploitation requires authenticated access at Author level or higher, and injected scripts ex...
CVE-2024-7778 Orbit Fox by ThemeIsle <= 2.10.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.10.36 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access...
WordPress Orbit Fox by ThemeIsle plugin <= 2.10.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability
Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by wesley wcraft in WordPress Plugin Orbit Fox by ThemeIsle versions = 2.10.36...
WordPress plugin Orbit Fox by ThemeIsle 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
WordPress Orbit Fox by ThemeIsle Plugin <= 2.10.36 is vulnerable to Cross Site Scripting (XSS)
Software Orbit Fox by ThemeIsle Type Plugin Vulnerable versions = 2.10.36 Fixed in 2.10.37 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-7778 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID cd6e92d6eaf7 Credits wesley wcraft...
Malicious code in orbit-landing (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2809 Malicious code in orbit-landing (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-2484
The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Services and Post Type Grid widgets in all versions up to, and including, 2.10.34 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...
CVE-2024-2484
The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Services and Post Type Grid widgets in all versions up to, and including, 2.10.34 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...
CVE-2024-2484
CVE-2024-2484 affects Orbit Fox by ThemeIsle for WordPress; stored XSS via Services and Post Type Grid widgets in all versions
WordPress plugin Orbit Fox by ThemeIsle security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
WordPress Orbit Fox by ThemeIsle plugin <= 2.10.34 - Authenticated Stored Cross-Site Scripting vulnerability
Authenticated Stored Cross-Site Scripting vulnerability discovered by wesley wcraft in WordPress Plugin Orbit Fox by ThemeIsle versions = 2.10.34...
WordPress Orbit Fox by ThemeIsle Plugin <= 2.10.34 is vulnerable to Cross Site Scripting (XSS)
Software Orbit Fox by ThemeIsle Type Plugin Vulnerable versions = 2.10.34 Fixed in 2.10.35 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2484 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 507ddf38e324 Credits wesley wcraft...
