The plugin Orbit Fox by ThemeIsle, a multi-functionality plugin installed on over 400,000 sites, has been found to carry two critical vulnerabilities. The vulnerabilities can potentially allow attackers to take over a WordPress website or inject malicious JavaScript into posts.

These are critical severity vulnerabilities and so have been addressed and patched urgently. With that, we strongly recommend updating to the patched version, 2.10.3, immediately if you have the plugin installe on your website.

For more information, please check the official public release.

If you have questions, don’t hesitate to contact our support team.

People that read this article also liked

Critical Vulnerabilities Found on PageLayer Page Builder Plugin Critical Security Flaw in outdated WooCommerce NAB Transact Plugin WordPress Websites Security Breach – Outbreak of Malicious File Attacks WordPress 5.7 “Esperanza” + WooCommerce 5.1 Released