Laborator

Products

Product	CVEs	Exploited	Latest
Kalium	4	–	Nov 6, 2025
Aurum - WordPress & WooCommerce Shopping Theme	1	–	Jan 7, 2025
Kalium 3 \| Creative WordPress & WooCommerce Theme	1	–	Jan 15, 2026
Oxygen	1	–	Feb 20, 2026
Oxygen - WooCommerce WordPress Theme	1	–	Mar 28, 2026

CVE-2025-12886 High 7.2 Oxygen <= 6.0.8 - Unauthenticated Server-Side Request Forgery via route_path 0.2%
CVE-2025-69299 High 7.2 WordPress Oxygen theme <= 6.0.8 - Server Side Request Forgery (SSRF) vulnerability 0.2%
CVE-2025-12895 Medium 5.3 Kalium <= 3.29 - Missing Authorization to Unauthenticated Mail Relay via kalium_vc_contact_form_request 0.3%
CVE-2025-53349 High 7.1 WordPress Kalium Theme <= 3.18.3 - Cross Site Scripting (XSS) Vulnerability 0.2%
CVE-2025-49926 High 7.2 WordPress Kalium theme <= 3.25 - Arbitrary Code Execution vulnerability 0.3%
CVE-2025-53348 Medium 5.3 WordPress Kalium Theme <= 3.18.3 - Broken Access Control Vulnerability 0.3%
CVE-2025-53347 Medium 4.3 WordPress Kalium Theme <= 3.18.3 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
CVE-2024-12781 Medium 4.3 Aurum - WordPress & WooCommerce Shopping Theme <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Demo Content Import 0.3%