Lucene search
K

15 matches found

Patchstack
Patchstack
added 2026/03/31 7:50 a.m.3 views

WordPress Oxygen theme <= 6.0.8 - Unauthenticated Server-Side Request Forgery via route_path vulnerability

Unauthenticated Server-Side Request Forgery via routepath vulnerability discovered by Ahmed Rayen Ayari in WordPress Theme Oxygen versions = 6.0.8...

7.2CVSS5.9AI score0.00074EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/03/29 5:10 a.m.1 views

CVE-2025-12886

The Oxygen Theme theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.0.8 via the laboratorcalcroute AJAX action. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web applicati...

7.2CVSS5.9AI score0.00074EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/28 6:30 a.m.1 views

EUVD-2025-209108

The Oxygen Theme theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.0.8 via the laboratorcalcroute AJAX action. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web applicati...

7.2CVSS5.9AI score0.00074EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/28 2:26 a.m.1 views

CVE-2025-12886

The Oxygen Theme theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.0.8 via the laboratorcalcroute AJAX action. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web applicati...

7.2CVSS5.9AI score0.00074EPSS
Exploits0References3
CVE
CVE
added 2026/03/28 2:26 a.m.11 views

CVE-2025-12886

The Oxygen Theme for WordPress (versions up to 6.0.8) is vulnerable to unauthenticated Server-Side Request Forgery via the laborator_calc_route AJAX action. This allows an attacker to issue web requests from the application to arbitrary locations, potentially querying and modifying information fr...

7.2CVSS5.9AI score0.00074EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/28 2:26 a.m.1 views

CVE-2025-12886 Oxygen <= 6.0.8 - Unauthenticated Server-Side Request Forgery via route_path

The Oxygen Theme theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.0.8 via the laboratorcalcroute AJAX action. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web applicati...

7.2CVSS5.9AI score0.00074EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/28 12:0 a.m.3 views

WordPress plugin Oxygen Theme 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.2CVSS6AI score0.00074EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/03/28 12:0 a.m.2 views

PT-2026-28271

The Oxygen Theme theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.0.8 via the laborator calc route AJAX action. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web...

7.2CVSS5.9AI score0.00074EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2026/02/20 3:46 p.m.1 views

CVE-2025-69299 WordPress Oxygen theme <= 6.0.8 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Laborator Oxygen oxygen allows Server Side Request Forgery.This issue affects Oxygen: from n/a through = 6.0.8...

5.3AI score0.0004EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/20 3:46 p.m.18 views

CVE-2025-69299 WordPress Oxygen theme <= 6.0.8 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Laborator Oxygen oxygen allows Server Side Request Forgery.This issue affects Oxygen: from n/a through = 6.0.8...

7.2CVSS0.0004EPSS
Exploits0References1
CVE
CVE
added 2026/02/20 3:46 p.m.3 views

CVE-2025-69299

CVE-2025-69299 (WordPress Oxygen theme

7.2CVSS5.5AI score0.0004EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/01/27 10:9 a.m.2 views

WordPress Oxygen theme <= 6.0.8 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Oxygen versions = 6.0.8...

7.2CVSS5.9AI score0.0004EPSS
Exploits0Affected Software1
Packet Storm
Packet Storm
added 2023/07/25 12:0 a.m.255 views

WordPress Oxygen-Theme 7.8 Directory Traversal

==================================================================================================================================== | Title : WordPress Oxygen-Theme v7.8 Directory Traversal Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...

7.1AI score
Exploits0
WPVulnDB
WPVulnDB
added 2014/08/01 10:59 a.m.8 views

Oxygen - Remote File Upload

The oxygen-theme WordPress theme was affected by a Remote File Upload security vulnerability...

2AI score
Exploits0References4Affected Software1
0day.today
0day.today
added 2013/11/13 12:0 a.m.20 views

WordPress oxygen-theme Themes Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress oxygen-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 12/11/2013 Vendor Homepage: http://www.orange-themes.com/ Themes Link: http://www.orange-themes.com/portfolio/oxygen/ Infected File:...

7.1AI score
Exploits0
Rows per page
Query Builder