The plugin called Orbit Fox, used for WordPress websites, has a security issue. This issue is called Stored Cross-Site Scripting and it affects all versions up to 2.10.43. This means that attackers with Contributor-level access or higher can add harmful code to pages that will run when someone visits that page.