Orbit Fox By Themeisle
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:orbit_fox_by_themeisle:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Orbit Fox By Themeisle (8ff41132-34da-5185-8cba-b3c3545b3cff) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-2287 |
vulnerable | 2026-06-08 06:02:41.831205 |
Orbit Fox < 2.10.24 - Author+ Server-Side Request Forgery
The Orbit Fox by ThemeIsle WordPress plugin before 2.10.24 does not limit URLs which may be used for the stock photo import feature, allowing the user to specify arbitrary URLs. This leads to a server-side request forgery as the user may force the server to access any URL of their choosing.
Published: 2023-05-30T07:49:17.119Z
Updated: 2025-01-10T20:55:53.771Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24158 |
vulnerable | 2026-06-08 05:30:03.886354 |
Orbit Fox by ThemeIsle < 2.10.3 - Authenticated Privilege Escalation
Orbit Fox by ThemeIsle has a feature to add a registration form to both the Elementor and Beaver Builder page builders functionality. As part of the registration form, administrators can choose which role to set as the default for users upon registration. This field is hidden from view for lower-level users, however, they can still supply the user_role parameter to update the default role for registration.
Published: 2021-04-05T18:27:42.000Z
Updated: 2024-08-03T19:21:18.563Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24157 |
vulnerable | 2026-06-08 05:30:03.884754 |
Orbit Fox by ThemeIsle < 2.10.3 - Authenticated Stored Cross Site Scripting
Orbit Fox by ThemeIsle has a feature to add custom scripts to the header and footer of a page or post. There were no checks to verify that a user had the unfiltered_html capability prior to saving the script tags, thus allowing lower-level users to inject scripts that could potentially be malicious.
Published: 2021-04-05T18:27:42.000Z
Updated: 2024-08-03T19:21:18.299Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.