VYPR

Oxygen Theme

by Laborator

CVEs (1)

  • CVE-2025-12886HigMar 28, 2026
    risk 0.47cvss 7.2epss 0.00

    The Oxygen Theme theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.0.8 via the laborator_calc_route AJAX action. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating…