Product by Themeisle
Orbit Fox
15 known vulnerabilities in Orbit Fox (Themeisle), 0 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2021-24158 | Orbit Fox by ThemeIsle < 2.10.3 - Authenticated Privilege Escalation | 6.5 | |
| Medium | CVE-2024-13183 | Themeisle Orbit Fox: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-1499 | Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | |
| Medium | CVE-2024-1497 | Themeisle Orbit Fox: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-0508 | Themeisle Orbit Fox: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-1323 | Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | |
| Medium | CVE-2021-24157 | Orbit Fox by ThemeIsle < 2.10.3 - Authenticated Stored Cross Site Scripting | 5.4 | |
| Medium | CVE-2024-1047 | ThemeIsle SDK <= Various Versions - Missing Authorization | 5.3 | |
| Medium | CVE-2024-2126 | Themeisle Orbit Fox: Cross-site Scripting | 6.4 | |
| Medium | CVE-2025-0311 | Themeisle Orbit Fox: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-2484 | Themeisle Orbit Fox: Cross-site Scripting | 6.4 | |
| Medium | CVE-2023-6781 | Themeisle Orbit Fox: Improper Input Validation | 6.4 | |
| Medium | CVE-2025-22659 | WordPress Orbit Fox by ThemeIsle plugin <= 2.10.44 - Cross Site Scripting (XSS) vulnerability | 6.5 | |
| Medium | CVE-2024-7778 | Themeisle Orbit Fox: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-1162 | Orbit Fox by ThemeIsle <= 2.10.29 - Cross-Site Request Forgery | 4.3 |