Security
فارسی
All products

themeisle-companion

WordPress · Plugin
24 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Orbit Fox <= 3.0.8 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-85418 themeisle-companion WordPress Medium Fix reported
Orbit Fox by ThemeIsle <= 3.0.7 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2026-16583 themeisle-companion WordPress Medium Fix reported
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More <= 3.0.7 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2026-65563 themeisle-companion WordPress Medium Fix reported
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More <= 3.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu-item-icon' ParameterCVE-2026-11358 themeisle-companion WordPress Medium Fix reported
Orbit Fox Companion <= 3.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post TaxonomyCVE-2025-12045 themeisle-companion WordPress Medium Fix reported
Orbit Fox by ThemeIsle <= 3.0.1 - Authenticated (Author+) Server-Side Request ForgeryCVE-2025-10874 themeisle-companion WordPress Medium Fix reported
Orbit Fox by ThemeIsle <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-58593 themeisle-companion WordPress Medium Fix reported
Orbit Fox by ThemeIsle <= 2.10.44 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-22659 themeisle-companion WordPress Medium Fix reported
Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag ParameterCVE-2024-13183 themeisle-companion WordPress Medium Fix reported
Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table WidgetCVE-2025-0311 themeisle-companion WordPress Medium Fix reported
Orbit Fox by ThemeIsle <= 2.10.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadCVE-2024-7778 themeisle-companion WordPress Medium Fix reported
Orbit Fox by ThemeIsle <= 2.10.27 - Authenticated(Contributor+) Stored Cross-site Scripting via Pricing Table Elementor WidgetCVE-2024-0508 themeisle-companion WordPress Medium Fix reported
Orbit Fox Companion <= 2.10.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom fieldsCVE-2023-6781 themeisle-companion WordPress Medium Fix reported
Orbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid WidgetsCVE-2024-2484 themeisle-companion WordPress Medium Fix reported
Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-1499 themeisle-companion WordPress Medium Fix reported
Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via form widget addr2_width attributeCVE-2024-1497 themeisle-companion WordPress Medium Fix reported
Orbit Fox by ThemeIsle <= 2.10.32 - Authenticated (Contributor+) Stored Cross-Site Scripiting via Registration Form WidgetCVE-2024-2126 themeisle-companion WordPress Medium Fix reported
ThemeIsle SDK <= Various Versions - Missing AuthorizationCVE-2024-1047 feedzy-rss-feedsmenu-icons WordPress Medium Fix reported
Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-1323 themeisle-companion WordPress Medium Fix reported
Orbit Fox by ThemeIsle <= 2.10.29 - Cross-Site Request ForgeryCVE-2024-1162 themeisle-companion WordPress Medium Fix reported