WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
themeisle-companion
Published
2021-01-12
Title
Orbit Fox by ThemeIsle < 2.10.3 - Authenticated Stored Cross Site Scripting
Slug
themeisle-companion
Published
2021-01-12
Title
Orbit Fox by ThemeIsle < 2.10.3 - Authenticated Privilege Escalation
Slug
themeisle-companion
Published
2023-05-02
Title
Orbit Fox < 2.10.24 - Author+ Server-Side Request Forgery
Slug
themeisle-companion
Published
2024-01-05
Title
Orbit Fox Companion < 2.10.27 - Contributor+ Stored XSS
Slug
themeisle-companion
Published
2024-01-15
Title
Orbit Fox by ThemeIsle < 2.10.28 - Contributor+ Stored XSS
Slug
themeisle-companion
Published
2024-02-01
Title
Orbit Fox by ThemeIsle < 2.10.30 - Connected API Keys Update via CSRF
Slug
themeisle-companion
Published
2024-02-01
Title
Orbit Fox by ThemeIsle < 2.10.29 - Unauthenticated Connected API Keys Update
Slug
themeisle-companion
Published
2024-02-26
Title
Orbit Fox by ThemeIsle < 2.10.32 - Contributor+ Stored XSS via Post Type Grid Widget
Slug
themeisle-companion
Published
2024-02-26
Title
Orbit Fox by ThemeIsle < 2.10.31 - Contributor+ Stored XSS via Form Widget
Slug
themeisle-companion
Published
2024-02-26
Title
Orbit Fox by ThemeIsle < 2.10.31 - Contributor+ Stored XSS via Pricing Table Widget
Slug
themeisle-companion
Published
2024-03-07
Title
Orbit Fox by ThemeIsle < 2.10.33 - Authenticated (Contributor+) Stored Cross-Site Scripiting via Registration Form Widget
Slug
themeisle-companion
Published
2024-06-21
Title
Orbit Fox by ThemeIsle < 2.10.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid Widgets
Slug
themeisle-companion
Published
2024-08-21
Title
Orbit Fox by ThemeIsle < 2.10.37 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
themeisle-companion
Published
2025-01-09
Title
Orbit Fox by ThemeIsle < 2.10.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget
Slug
themeisle-companion
Published
2025-01-09
Title
Orbit Fox by ThemeIsle < 2.10.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag Parameter
Slug
themeisle-companion
Published
2025-02-03
Title
Orbit Fox by ThemeIsle < 2.10.45 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
themeisle-companion
Published
2025-09-03
Title
Orbit Fox by ThemeIsle < 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
themeisle-companion
Published
2025-10-03
Title
Orbit Fox < 3.0.2 - Author+ Server-Side Request Forgery
Slug
themeisle-companion
Published
2025-11-03
Title
Orbit Fox Companion < 3.0.3 - Authenticated (Author+) Stored Cross-Site Scripting via Post Taxonomy
Slug
themeloom-widgets
Published
2025-09-10
Title
ThemeLoom Widgets <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thememove-core
Published
2025-06-24
Title
ThemeMove Core <= 1.4.2 - Authenticated (Subscriber+) PHP Object Injection
Slug
themerain-core
Published
2025-10-24
Title
ThemeRain Core <= 1.1.9 - Missing Authorization
Slug
themereps-helper
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
themeruby-multi-authors
Published
2026-01-23
Title
ThemeRuby Multi Authors < 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'before' and 'after' Shortcode Attributes
Slug
themes4wp-youtube-external-subtitles
Published
2024-10-24
Title
Themes4WP YouTube External Subtitles <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting