Orbit Fox By Themeisle

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-65563 Jul 27, 13:59 MEDIUM This Month

Stored cross-site scripting (XSS) in Orbit Fox by ThemeIsle versions 3.0.7 and below allows authenticated administrators to inject malicious scripts that execute when another administrator views the affected plugin content. This vulnerability requires high privileges and user interaction; no public exploit has been identified.

WordPress XSS Wordpress Plugin Orbit Fox By Themeisle Themeisle

NVD

CVSS 3.1

5.9

EPSS

0.1%

CVE-2026-65563

EPSS 0% CVSS 5.9

MEDIUM This Month

Stored cross-site scripting (XSS) in Orbit Fox by ThemeIsle versions 3.0.7 and below allows authenticated administrators to inject malicious scripts that execute when another administrator views the affected plugin content. This vulnerability requires high privileges and user interaction; no public exploit has been identified.

WordPress XSS Wordpress Plugin +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy