Skip to content
PluginCanary

Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More

by Themeisle · 100,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: vulnerability published 7 Sep 2026, fixed in 3.0.9.

83/ 100 Canary Score
Sub-scores for Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More
Ownership100
Maintenance100
Security60
Support70
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 7 Sep 2026, fixed in 3.0.9. Update to version 3.0.9 or later.7 Sep 2026Evidence
  • InfoSEC-310 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
themeisle16 Nov 2016 to 26 Oct 2026, 122 commits
codeinwp11 Aug 2017 to 2 Dec 2019, 89 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
9 days ago
Releases, 24 months
21
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More
Q1 20248
Q2 20241
Q3 20241
Q4 20246
Q1 20253
Q2 20251
Q3 20252
Q4 20254
Q1 20260
Q2 20262
Q3 20263
Q4 20261

Last release 26 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
7 Sep 2026Orbit Fox <= 3.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.0.83.0.90
27 Jul 2026Orbit Fox by ThemeIsle <= 3.0.7 - Authenticated (Author+) Stored Cross-Site Scripting6.4<= 3.0.73.0.80
24 Jul 2026Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More <= 3.0.7 - Authenticated (Author+) Stored Cross-Site Scripting6.4<= 3.0.73.0.80
17 Jun 2026Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More <= 3.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu-item-icon' Parameter4.4<= 3.0.63.0.70
3 Nov 2025Orbit Fox Companion <= 3.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post Taxonomy6.4<= 3.0.23.0.31
3 Oct 2025Orbit Fox by ThemeIsle <= 3.0.1 - Authenticated (Author+) Server-Side Request Forgery6.4<= 3.0.13.0.20
3 Sep 2025Orbit Fox by ThemeIsle <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.0.03.0.10
3 Feb 2025Orbit Fox by ThemeIsle <= 2.10.44 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.10.442.10.450
9 Jan 2025Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag Parameter6.4<= 2.10.432.10.440
9 Jan 2025Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget6.4<= 2.10.432.10.440
21 Aug 2024Orbit Fox by ThemeIsle <= 2.10.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4<= 2.10.362.10.370
21 Jun 2024Orbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid Widgets6.4<= 2.10.342.10.350
7 Mar 2024Orbit Fox by ThemeIsle <= 2.10.32 - Authenticated (Contributor+) Stored Cross-Site Scripiting via Registration Form Widget6.4<= 2.10.322.10.330
26 Feb 2024Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.10.312.10.320
26 Feb 2024Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via form widget addr2_width attribute6.4<= 2.10.302.10.310
26 Feb 2024Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.10.302.10.310
1 Feb 2024Orbit Fox by ThemeIsle <= 2.10.29 - Cross-Site Request Forgery4.3<= 2.10.292.10.230n/a
1 Feb 2024ThemeIsle SDK <= Various Versions - Missing Authorization5.3<= 2.10.282.10.290
15 Jan 2024Orbit Fox by ThemeIsle <= 2.10.27 - Authenticated(Contributor+) Stored Cross-site Scripting via Pricing Table Elementor Widget6.4<= 2.10.272.10.281
5 Jan 2024Orbit Fox Companion <= 2.10.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom fields6.4<= 2.10.262.10.270
27 Apr 2023Orbit Fox by ThemeIsle <= 2.10.23 - Authenticated (Author+) Server-Side Request Forgery via URL7.4< 2.10.242.10.241
12 Jan 2021Orbit Fox by ThemeIsle <= 2.10.2 - Authenticated (Contributor+) Stored Cross Site Scripting6.4< 2.10.32.10.30
24 Nov 2020Orbit Fox by ThemeIsle <= 2.10.2 - Authenticated Privilege Escalation9.9< 2.10.32.10.324
12 Nov 2018Orbit Fox by ThemeIsle <= 2.6.3 - Improper REST Capabilities Checks7.3<= 2.6.32.6.40

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More
Q1 20245.0
Q2 20255.0
Q4 20265.0

Average rating stayed at 5.0 between Q1 2024 and Q4 2026.

Rating distribution
5 star277
4 star25
3 star5
2 star2
1 star8

Momentum

100,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More
4 May 20261,893
11 May 20264,375
18 May 20263,248
25 May 202663,540
1 Jun 20267,791
8 Jun 20266,316
15 Jun 202661,683
22 Jun 20269,371
29 Jun 20266,386
6 Jul 202610,325
13 Jul 20265,460
20 Jul 202658,837
27 Jul 202662,263
3 Aug 202614,556
10 Aug 20266,752
17 Aug 20265,943
24 Aug 20266,542
31 Aug 20265,521
7 Sep 20265,430
14 Sep 20264,930
21 Sep 20264,421
28 Sep 202657,159
5 Oct 202613,686
12 Oct 20266,179
19 Oct 20268,496
26 Oct 202665,408
2 Nov 20261,553

Weekly downloads over the last 4 weeks are 8% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Starter Sites & Templates by NeveScore 91 · 100,000+Import / Export Customizer SettingsScore 91 · 50,000+Sydney ToolboxScore 91 · 50,000+Bosa Starter SitesScore 91 · 30,000+Clever FoxScore 91 · 30,000+

Facts

Version3.0.11
AuthorThemeisle
Added3 Nov 2016
Last updated26 Oct 2026
Active installs100,000+
Requires WordPress5.3
Tested up to7.1.4
Requires PHP7.4
CategorySite Administration & Utilities > Site Migration & Cloning
Tagssvg support, cookie notice, share buttons, duplicate page, login customizer

Other plugins by this author: LightStart - Maintenance Mode, Coming Soon and Landing Page Builder, Otter Blocks - Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE, Redirection for Contact Form 7, Menu Icons by Themeisle - Add Icons to Navigation Menus, Starter Sites & Templates by Neve, Disable Admin Notices - Hide Dashboard Notifications, Robin Image Optimizer - Unlimited Image Optimization, WebP & AVIF, Titan Anti-spam & Security - Brute Force Protection, 2FA & Spam Filter, Woody Code Snippets - Insert PHP, CSS, JS, and Header/Footer Scripts, Remove Category URL - Remove ‘category’ base from category permalinks, RSS Aggregator by Feedzy - Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator, Auto Featured Image (Auto Post Thumbnail)

Questions

Is Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More still maintained?

Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More was last updated on 26 Oct 2026. Its Canary status is Healthy.

Is Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More safe?

Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More has no open unpatched vulnerabilities on record. 10 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More?

The wordpress.org author is Themeisle. Recent committers: themeisle, codeinwp, plugin-master. We have recorded no ownership change.

What can I use instead of Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More?

Plugins in the same category with a higher Canary Score: Starter Sites & Templates by Neve, Import / Export Customizer Settings, Sydney Toolbox, Bosa Starter Sites, Clever Fox.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue