Laborator vulnerabilities

CVEs per yearBy the year they were published

1. 20255
2. 20263

Newest CVEs

• CVE-2025-12886

  Oxygen <= 6.0.8 - Unauthenticated Server-Side Request Forgery via route_path

  Laborator · Oxygen - WooCommerce WordPress Theme

  High7.2
• CVE-2025-69299

  WordPress Oxygen theme <= 6.0.8 - Server Side Request Forgery (SSRF) vulnerability

  Laborator · Oxygen

  High7.2
• CVE-2025-12895

  Kalium <= 3.29 - Missing Authorization to Unauthenticated Mail Relay via kalium_vc_contact_form_request

  Laborator · Kalium 3 | Creative WordPress & WooCommerce Theme

  Medium5.3
• CVE-2025-53349

  WordPress Kalium Theme <= 3.18.3 - Cross Site Scripting (XSS) Vulnerability

  Laborator · Kalium

  High7.1
• CVE-2025-49926

  WordPress Kalium theme <= 3.25 - Arbitrary Code Execution vulnerability

  Laborator · Kalium

  High7.2
• CVE-2025-53348

  WordPress Kalium Theme <= 3.18.3 - Broken Access Control Vulnerability

  Laborator · Kalium

  Medium5.3
• CVE-2025-53347

  WordPress Kalium Theme <= 3.18.3 - Cross Site Request Forgery (CSRF) Vulnerability

  Laborator · Kalium

  Medium4.3
• CVE-2024-12781

  Aurum - WordPress & WooCommerce Shopping Theme <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Demo Content Import

  Laborator · Aurum - WordPress & WooCommerce Shopping Theme

  Medium4.3