Skip to content
OpenAdvisories

Vendor

Laborator

8 known vulnerabilities.

Products

Kalium 4 Kalium 3 | Creative WordPress & WooCommerce Theme 1 Oxygen 1 Aurum - WordPress & WooCommerce Shopping Theme 1 Oxygen - WooCommerce WordPress Theme 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-12895

    Kalium <= 3.29 - Missing Authorization to Unauthenticated Mail Relay via kalium_vc_contact_form_request

    The Kalium 3 | Creative WordPress & WooCommerce Theme theme for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the kalium_vc_contact_form_request() function in all versions up to, and including, 3.29. This makes it …

    Laborator Kalium 3 | Creative WordPress & WooCommerce Theme Web / CMS
  • Medium 5.3
    CVE-2025-53348

    WordPress Kalium Theme <= 3.18.3 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Laborator Kalium kalium allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kalium: from n/a through <= 3.18.3.

    Laborator Kalium
  • Medium 4.3
    CVE-2025-53347

    WordPress Kalium Theme <= 3.18.3 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Laborator Kalium kalium allows Cross Site Request Forgery.This issue affects Kalium: from n/a through <= 3.18.3.

    Laborator Kalium
  • Medium 4.3
    CVE-2024-12781

    Aurum - WordPress & WooCommerce Shopping Theme <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Demo Content Import

    The Aurum - WordPress & WooCommerce Shopping Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'lab_1cl_demo_install_package_content' function in all versions up to, and including, 4.0.2. Thi…

    Laborator Aurum - WordPress & WooCommerce Shopping Theme Web / CMS