Vulnerability Bulletins

Multiple Vulnerabilities Patched in Orbit Fox by ThemeIsle Plugin


System information

   
Affected software Wordpress

Description

On November 19, 2020, our Threat Intelligence team responsibly disclosed two vulnerabilities in Orbit Fox by ThemeIsle, a WordPress plugin used by over 400,000 sites. One of these flaws made it possible for attackers with contributor level access or above to escalate their privileges to those of an administrator and potentially take over a WordPress […]

More info:

https://www.wordfence.com/blog/2021/01/multiple-vulnerabilities-patched-in-orbit-fox-by-themeisle-plugin/

Standar resources

Property Value
CVE

Version history

Version Comments Date
1.0 Advisory issued 2021-01-14
Ministerio de Defensa
CNI
CCN
CCN-CERT