Skip to content
OpenAdvisories

Archive

24 October 2025

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2025-10874 Public exploit

    Orbit Fox < 3.0.2 - Author+ Server-Side Request Forgery

    The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.2 does not limit URLs which may be used for the stock photo import feature, allowing the user to specify arbitrary URLs. This leads to a ser…