CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-22659 | Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More [themeisle-companion] < 2.10.45 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 2.10.45 | 2.10.45 | 2025-02-03 | — |
The Orbit Fox by ThemeIsle plugin for WordPress is susceptible to stored cross-site scripting (XSS) vulnerabilities up to version 2.10.44. Insufficient input sanitization and output escaping allow authenticated users with contributor privileges or higher to inject malicious scripts that can be executed whenever other users view the affected pages.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.