Skip to content
OpenAdvisories

Vendor

Laborator

8 known vulnerabilities.

Products

Kalium 4 Kalium 3 | Creative WordPress & WooCommerce Theme 1 Oxygen 1 Aurum - WordPress & WooCommerce Shopping Theme 1 Oxygen - WooCommerce WordPress Theme 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.2
    CVE-2025-12886

    Oxygen <= 6.0.8 - Unauthenticated Server-Side Request Forgery via route_path

    The Oxygen Theme theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.0.8 via the laborator_calc_route AJAX action. This makes it possible for unauthenticated attackers to make web requests to arbitrary loca…

    Laborator Oxygen - WooCommerce WordPress Theme Web / CMS
  • High 7.2
    CVE-2025-69299

    WordPress Oxygen theme <= 6.0.8 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in Laborator Oxygen oxygen allows Server Side Request Forgery.This issue affects Oxygen: from n/a through <= 6.0.8.

    Laborator Oxygen
  • High 7.1
    CVE-2025-53349

    WordPress Kalium Theme <= 3.18.3 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Laborator Kalium kalium allows Reflected XSS.This issue affects Kalium: from n/a through <= 3.18.3.

    Laborator Kalium
  • High 7.2
    CVE-2025-49926

    WordPress Kalium theme <= 3.25 - Arbitrary Code Execution vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in Laborator Kalium kalium allows Code Injection.This issue affects Kalium: from n/a through <= 3.25.

    Laborator Kalium