Skip to content
OpenAdvisories

Product · Laborator

Oxygen - WooCommerce WordPress Theme

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2025-12886

    Oxygen <= 6.0.8 - Unauthenticated Server-Side Request Forgery via route_path

    The Oxygen Theme theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.0.8 via the laborator_calc_route AJAX action. This makes it possible for unauthenticated attackers to make web requests to arbitrary loca…

    Laborator Oxygen - WooCommerce WordPress Theme Web / CMS