Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-13183
6.4
MEDIUMCVSS v3
Severity scale
010
Description
The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_tag’ parameter in all versions up to, and including, 2.10.43 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & MoreWordPress Plugin Directory<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/foS_QbuY-Lg?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<h3>Why Choose Orbit Fox?</h3>
<p><strong>All Essential Website Features in One Place</strong></p>
<p>Orbit Fox includes all the popular functionality most site owners need: SVG support, social sharing, website templates, custom fonts, stock photos, page builder widgets, menu icons, and site customization tools.</p>
<p><strong>Eliminate Plugin Bloat</strong></p>
<p>Replace over a dozen individual utility plugins with just one solution. Reduce plugin management complexity, minimize potential conflicts, and keep your WordPress dashboard organized.</p>
<p><strong>Smart Performance Optimization</strong></p>
<p>Modules only load when enabled and are compatible with your existing theme and plugins, ensuring optimal site performance and preventing conflicts.</p>
<p><strong>Save Time on Setup and Maintenance</strong></p>
<p>Skip installing a dozen separate plugins when building new sites. Get fully functional websites in minutes, not hours. Plus, maintain just one plugin instead of managing multiple updates, settings, and compatibility issues.</p>
<h3>Orbit Fox Modules</h3>
<p><strong>Content & Design:</strong></p>
<ul>
<li>Website Templates – 45+ professional starter website templates to choose from</li>
<li>Custom Fonts – Upload and use any custom font on your website</li>
<li>Reading Progress Bar – Increase engagement with a visual reading progress indicator</li>
<li>SVG Support – Enable safe SVG file uploads</li>
<li>Free Stock Photos – 1,300+ free images to use for personal and commercial purposes</li>
</ul>
<p><strong>Page Building & Widgets:</strong></p>
<ul>
<li>Elementor Widgets – Add 6 popular widgets to Elementor</li>
<li>Beaver Builder Modules – Add 6 popular modules to Beaver Builder</li>
<li>Customize Login Page – Change the design of your site’s login page and customize your login form</li>
<li>Duplicate Page or Post – Duplicate any post or page on your website with one click</li>
</ul>
<p><strong>User Experience:</strong></p>
<ul>
<li>Social Share Buttons – Add social sharing buttons to your website with mobile/desktop optimization</li>
<li>Menu Icons – Add icons to any menu</li>
<li>GDPR/CCPA Cookie Notice – Show GDPR/CCPA-compliant cookie notifications</li>
</ul>
<p><strong>Site Management:</strong></p>
<ul>
<li>Header and Footer Scripts – Add tracking codes and custom CSS/JS</li>
<li>Disable Comments – Site-wide comment control</li>
</ul>
<h3>Works With Any Theme</h3>
<p>Orbit Fox is designed to work seamlessly with all WordPress themes. For the best experience, pair it with our professional themes like <a href="https://themeisle.com/themes/neve/" rel="nofollow ugc"><strong>Neve</strong></a> and <a href="https://themeisle.com/themes/hestia/" rel="nofollow ugc"><strong>Hestia</strong></a> – built by the same team for perfect integration.</p>
<h3>Who Should Use Orbit Fox</h3>
<ul>
<li><strong>WordPress Beginners</strong> – Get professional features without the learning curve</li>
<li><strong>Freelancers & Agencies</strong> – Build efficient, streamlined client websites</li>
<li><strong>Website Owners</strong> – Access essential functionality through one organized solution</li>
<li><strong>Anyone</strong> who wants commonly needed features without multiple plugin installations</li>
</ul>
<h3>Support</h3>
<p>We’re here to help. Feel free to open a new thread on the <a href="https://wordpress.org/support/plugin/themeisle-companion/" rel="ugc">Support Forum</a>.</p>
<h3>Documentation</h3>
<p>Need help getting started? Check out our <a href="https://docs.themeisle.com/article/951-orbit-fox-documentation" rel="nofollow ugc">complete documentation</a> for step-by-step guides on every feature.</p>
<h3>Useful Resources</h3>
<ul>
<li>If you like Orbit Fox, you’re sure to love <a href="https://themeisle.com/wordpress-plugins/" rel="nofollow ugc">our other plugins</a> as well.</li>
<li>Learn more about WordPress on our <a href="https://themeisle.com/blog/" rel="nofollow ugc">blog</a>.</li>
<li>Get the most out of your WordPress website with our helpful <a href="https://youtube.com/playlist?list=PLmRasCVwuvpSep2MOsIoE0ncO9JE3FcKP" rel="nofollow ugc">YouTube Tutorials</a>.</li>
</ul>
WordPress Plugin Directory<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/foS_QbuY-Lg?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<h3>Why Choose Orbit Fox?</h3>
<p><strong>All Essential Website Features in One Place</strong></p>
<p>Orbit Fox includes all the popular functionality most site owners need: SVG support, social sharing, website templates, custom fonts, stock photos, page builder widgets, menu icons, and site customization tools.</p>
<p><strong>Eliminate Plugin Bloat</strong></p>
<p>Replace over a dozen individual utility plugins with just one solution. Reduce plugin management complexity, minimize potential conflicts, and keep your WordPress dashboard organized.</p>
<p><strong>Smart Performance Optimization</strong></p>
<p>Modules only load when enabled and are compatible with your existing theme and plugins, ensuring optimal site performance and preventing conflicts.</p>
<p><strong>Save Time on Setup and Maintenance</strong></p>
<p>Skip installing a dozen separate plugins when building new sites. Get fully functional websites in minutes, not hours. Plus, maintain just one plugin instead of managing multiple updates, settings, and compatibility issues.</p>
<h3>Orbit Fox Modules</h3>
<p><strong>Content & Design:</strong></p>
<ul>
<li>Website Templates – 45+ professional starter website templates to choose from</li>
<li>Custom Fonts – Upload and use any custom font on your website</li>
<li>Reading Progress Bar – Increase engagement with a visual reading progress indicator</li>
<li>SVG Support – Enable safe SVG file uploads</li>
<li>Free Stock Photos – 1,300+ free images to use for personal and commercial purposes</li>
</ul>
<p><strong>Page Building & Widgets:</strong></p>
<ul>
<li>Elementor Widgets – Add 6 popular widgets to Elementor</li>
<li>Beaver Builder Modules – Add 6 popular modules to Beaver Builder</li>
<li>Customize Login Page – Change the design of your site’s login page and customize your login form</li>
<li>Duplicate Page or Post – Duplicate any post or page on your website with one click</li>
</ul>
<p><strong>User Experience:</strong></p>
<ul>
<li>Social Share Buttons – Add social sharing buttons to your website with mobile/desktop optimization</li>
<li>Menu Icons – Add icons to any menu</li>
<li>GDPR/CCPA Cookie Notice – Show GDPR/CCPA-compliant cookie notifications</li>
</ul>
<p><strong>Site Management:</strong></p>
<ul>
<li>Header and Footer Scripts – Add tracking codes and custom CSS/JS</li>
<li>Disable Comments – Site-wide comment control</li>
</ul>
<h3>Works With Any Theme</h3>
<p>Orbit Fox is designed to work seamlessly with all WordPress themes. For the best experience, pair it with our professional themes like <a href="https://themeisle.com/themes/neve/" rel="nofollow ugc"><strong>Neve</strong></a> and <a href="https://themeisle.com/themes/hestia/" rel="nofollow ugc"><strong>Hestia</strong></a> – built by the same team for perfect integration.</p>
<h3>Who Should Use Orbit Fox</h3>
<ul>
<li><strong>WordPress Beginners</strong> – Get professional features without the learning curve</li>
<li><strong>Freelancers & Agencies</strong> – Build efficient, streamlined client websites</li>
<li><strong>Website Owners</strong> – Access essential functionality through one organized solution</li>
<li><strong>Anyone</strong> who wants commonly needed features without multiple plugin installations</li>
</ul>
<h3>Support</h3>
<p>We’re here to help. Feel free to open a new thread on the <a href="https://wordpress.org/support/plugin/themeisle-companion/" rel="ugc">Support Forum</a>.</p>
<h3>Documentation</h3>
<p>Need help getting started? Check out our <a href="https://docs.themeisle.com/article/951-orbit-fox-documentation" rel="nofollow ugc">complete documentation</a> for step-by-step guides on every feature.</p>
<h3>Useful Resources</h3>
<ul>
<li>If you like Orbit Fox, you’re sure to love <a href="https://themeisle.com/wordpress-plugins/" rel="nofollow ugc">our other plugins</a> as well.</li>
<li>Learn more about WordPress on our <a href="https://themeisle.com/blog/" rel="nofollow ugc">blog</a>.</li>
<li>Get the most out of your WordPress website with our helpful <a href="https://youtube.com/playlist?list=PLmRasCVwuvpSep2MOsIoE0ncO9JE3FcKP" rel="nofollow ugc">YouTube Tutorials</a>.</li>
</ul>