Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More

Explore Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More vulnerabilities across all versions. Currently tracking 22 known vulnerabilities, including severity, impact, and patch status.

01234567891003.11.2016Today12.11.20187.3Orbit Fox by ThemeIsle <= 2.6.3 - Improper REST Capabilities Checks CVSS 7.3 · 12.11.201824.11.20209.9Orbit Fox by ThemeIsle <= 2.10.2 - Authenticated Privilege Escalation CVSS 9.9 · 24.11.202012.01.20216.4Orbit Fox by ThemeIsle <= 2.10.2 - Authenticated (Contributor+) Stored Cross Site Scripting CVSS 6.4 · 12.01.202127.04.20237.4Orbit Fox by ThemeIsle <= 2.10.23 - Authenticated (Author+) Server-Side Request Forgery via URL CVSS 7.4 · 27.04.202305.01.20246.4Orbit Fox Companion <= 2.10.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom fields CVSS 6.4 · 05.01.202415.01.20246.4Orbit Fox by ThemeIsle <= 2.10.27 - Authenticated(Contributor+) Stored Cross-site Scripting via Pricing Table Elementor Widget CVSS 6.4 · 15.01.202401.02.20244.3Orbit Fox by ThemeIsle <= 2.10.29 - Cross-Site Request Forgery CVSS 4.3 · 01.02.20245.3ThemeIsle SDK <= Various Versions - Missing Authorization CVSS 5.3 · 01.02.202426.02.20246.4Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 26.02.20246.4Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 26.02.20246.4Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via form widget addr2_width attribute CVSS 6.4 · 26.02.202407.03.20246.4Orbit Fox by ThemeIsle <= 2.10.32 - Authenticated (Contributor+) Stored Cross-Site Scripiting via Registration Form Widget CVSS 6.4 · 07.03.202421.06.20246.4Orbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid Widgets CVSS 6.4 · 21.06.202421.08.20246.4Orbit Fox by ThemeIsle <= 2.10.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVSS 6.4 · 21.08.202409.01.20256.4Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget CVSS 6.4 · 09.01.20256.4Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag Parameter CVSS 6.4 · 09.01.202503.02.20256.4Orbit Fox by ThemeIsle <= 2.10.44 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 03.02.202503.09.20256.4Orbit Fox by ThemeIsle <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 03.09.202503.10.20256.4Orbit Fox by ThemeIsle <= 3.0.1 - Authenticated (Author+) Server-Side Request Forgery CVSS 6.4 · 03.10.202503.11.20256.4Orbit Fox Companion <= 3.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post Taxonomy CVSS 6.4 · 03.11.202517.06.20264.4Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More <= 3.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu-item-icon' Parameter CVSS 4.4 · 17.06.202624.07.20266.4Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More <= 3.0.7 - Authenticated (Author+) Stored Cross-Site Scripting CVSS 6.4 · 24.07.2026

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

22

Get automatic notifications for all Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More vulnerabilities before they are exploited.

Vulnerability Records

22 records
2026-07-24 00:00CVE-2026-65563
6.4
Medium
Ananda DhakalYes
2026-06-17 16:48CVE-2026-11358
4.4
Medium
Meher Sudhakar AbbireddiYes
2025-11-03 00:00CVE-2025-12045
6.4
Medium
Dmitrii IgnatyevYes
2025-10-03 00:00CVE-2025-10874
6.4
Medium
Ryan RothYes
2025-09-03 00:00CVE-2025-58593
6.4
Medium
MichaelYes
2025-02-03 00:00CVE-2025-22659
6.4
Medium
PrissyYes
2025-01-09 18:53CVE-2024-13183
6.4
Medium
Ankit PatelYes
2025-01-09 18:25CVE-2025-0311
6.4
Medium
WebbernautYes
2024-08-21 20:32CVE-2024-7778
6.4
Medium
wesley (wcraft)Yes
2024-06-21 00:00CVE-2024-2484
6.4
Medium
wesley (wcraft)Yes
Showing 1–10 of 22 reports
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts &amp; More banner
Latestv3.0.8

Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts &amp; More

Themeisle

Author

Themeisle

4.8(317)
96/100
Last Updated
2026-07-23 (6d ago)
Active Installs
100,000+
Downloads
13,843,822
Requires WP
5.3+
Requires PHP
7.4+
Tested up to
WP 7.0.2
Created
2016-11-03 (10y ago)

Why Choose Orbit Fox? All Essential Website Features in One Place Orbit Fox includes all the popular functionality most site owners need: SVG support, social sharing, website templates, custom fonts, stock photos, page builder widgets, menu icons, and site customization tools. Eliminate Plugin Bloat Replace over a dozen individual utility plugins with just one solution. Reduce plugin management complexity, minimize potential conflicts, and keep your WordPress dashboard organized. Smart Performance Optimization Modules only load when enabled and are compatible with your existing theme and plugins, ensuring optimal site performance and preventing conflicts. Save Time on Setup and Maintenance Skip installing a dozen separate plugins when building new sites. Get fully functional websites in minutes, not hours. Plus, maintain just one plugin instead of managing multiple updates, settings, and compatibility issues. Orbit Fox Modules Content & Design: Website Templates – 45+ professional starter website templates to choose from Custom Fonts – Upload and use any custom font on your website Reading Progress Bar – Increase engagement with a visual reading progress indicator SVG Support – Enable safe SVG file uploads Free Stock Photos – 1,300+ free images to use for personal and commercial purposes Page Building & Widgets: Elementor Widgets – Add 6 popular widgets to Elementor Beaver Builder Modules – Add 6 popular modules to Beaver Builder Customize Login Page – Change the design of your site’s login page and customize your login form Duplicate Page or Post – Duplicate any post or page on your website with one click User Experience: Social Share Buttons – Add social sharing buttons to your website with mobile/desktop optimization Menu Icons – Add icons to any menu GDPR/CCPA Cookie Notice – Show GDPR/CCPA-compliant cookie notifications Site Management: Header and Footer Scripts – Add tracking codes and custom CSS/JS Disable Comments – Site-wide comment control Works With Any Theme Orbit Fox is designed to work seamlessly with all WordPress themes. For the best experience, pair it with our professional themes like Neve and Hestia – built by the same team for perfect integration. Who Should Use Orbit Fox WordPress Beginners – Get professional features without the learning curve Freelancers & Agencies – Build efficient, streamlined client websites Website Owners – Access essential functionality through one organized solution Anyone who wants commonly needed features without multiple plugin installations Support We’re here to help. Feel free to open a new thread on the Support Forum. Documentation Need help getting started? Check out our complete documentation for step-by-step guides on every feature. Useful Resources If you like Orbit Fox, you’re sure to love our other plugins as well. Learn more about WordPress on our blog. Get the most out of your WordPress website with our helpful YouTube Tutorials.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C