Orbit Fox by ThemeIsle, fbec1cb8181da969b166e5a3fd0b0f934be88faa

CVE, Research URL: fbec1cb8181da969b166e5a3fd0b0f934be88faa
Home page URL: Security reports for Orbit Fox by ThemeIsle
Application: Orbit Fox by ThemeIsle
Published on: Apr 27, 2023
Research Description: Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More [themeisle-companion] < 2.10.24 WordPress Orbit Fox by ThemeIsle Plugin < 2.10.24 is vulnerable to Server Side Request Forgery (SSRF) Update the WordPress Orbit Fox by ThemeIsle plugin to the latest available version (at least 2.10.24). An unknown person discovered and reported this Server Side Request Forgery (SSRF) vulnerability in WordPress Orbit Fox by ThemeIsle Plugin. This could allow a malicious actor to cause a website to execute website requests to an arbitrary domain of the attacker. This could allow a malicious actor to find sensitive information of other services running on the system. This vulnerability has been fixed in version 2.10.24.
Affected versions: max 2.10.24.
Status: vulnerable