<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: themeisle-orbit-fox-duplicate-page-menu-icons-svg-support-cookie-notice-custom-f</title><description>Every new CVE for themeisle-orbit-fox-duplicate-page-menu-icons-svg-support-cookie-notice-custom-f.</description><link>https://agentprime.io/</link><item><title>CVE-2026-11358: Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts &amp; More &lt;= 3.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via &apos;menu-item-icon&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-11358/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-11358/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Jun 2026 05:34:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-12045: Orbit Fox Companion &lt;= 3.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post Taxonomy</title><link>https://agentprime.io/advisories/CVE-2025-12045/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-12045/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 04 Nov 2025 11:19:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-13183: Orbit Fox by ThemeIsle &lt;= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag Parameter</title><link>https://agentprime.io/advisories/CVE-2024-13183/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-13183/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Jan 2025 07:21:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-0311: Orbit Fox by ThemeIsle &lt;= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget</title><link>https://agentprime.io/advisories/CVE-2025-0311/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-0311/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Jan 2025 06:43:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-7778: Orbit Fox by ThemeIsle &lt;= 2.10.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload</title><link>https://agentprime.io/advisories/CVE-2024-7778/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-7778/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Aug 2024 09:29:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-2484: Orbit Fox by ThemeIsle &lt;= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid Widgets</title><link>https://agentprime.io/advisories/CVE-2024-2484/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-2484/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Jun 2024 02:01:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-1499: Orbit Fox by ThemeIsle &lt;= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2024-1499/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1499/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Mar 2024 15:27:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-1497: Orbit Fox by ThemeIsle &lt;= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via form widget addr2_width attribute</title><link>https://agentprime.io/advisories/CVE-2024-1497/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1497/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Mar 2024 15:27:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-2126: Orbit Fox by ThemeIsle &lt;= 2.10.32 - Authenticated (Contributor+) Stored Cross-Site Scripiting via Registration Form Widget</title><link>https://agentprime.io/advisories/CVE-2024-2126/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-2126/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Mar 2024 15:26:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-1323: Orbit Fox by ThemeIsle &lt;= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2024-1323/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1323/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 27 Feb 2024 04:32:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-0508: Orbit Fox by ThemeIsle &lt;= 2.10.27 - Authenticated(Contributor+) Stored Cross-site Scripting via Pricing Table Elementor Widget</title><link>https://agentprime.io/advisories/CVE-2024-0508/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-0508/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Feb 2024 21:22:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-1162: Orbit Fox by ThemeIsle &lt;= 2.10.29 - Cross-Site Request Forgery</title><link>https://agentprime.io/advisories/CVE-2024-1162/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1162/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 02 Feb 2024 05:33:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-1047: ThemeIsle SDK &lt;= Various Versions - Missing Authorization</title><link>https://agentprime.io/advisories/CVE-2024-1047/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1047/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 02 Feb 2024 05:33:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-6781: Orbit Fox Companion &lt;= 2.10.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom fields</title><link>https://agentprime.io/advisories/CVE-2023-6781/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-6781/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Jan 2024 08:32:29 GMT</pubDate><category>CVE</category></item></channel></rss>