Laborator vulnerabilities
We track 4 vulnerabilities in Laborator products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on March 28, 2026.
Latest Laborator vulnerabilities
- 7.2 High severity
Oxygen - WooCommerce WordPress Theme: Server-Side Request Forgery
The Oxygen Theme theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.0.8 via the laborator_calc_route AJAX action. This makes it possible for unauthenticated attackers to make web requests to arbitrary locat
- 7.2 High severity
Oxygen: Server-Side Request Forgery
Server-Side Request Forgery (SSRF) vulnerability in Laborator Oxygen oxygen allows Server Side Request Forgery.This issue affects Oxygen: from n/a through <= 6.0.8.
- 7.1 High severity
Kalium: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Laborator Kalium kalium allows Reflected XSS.This issue affects Kalium: from n/a through <= 3.18.3.
- 7.2 High severity
Kalium: Improper Control of Generation of Code
Improper Control of Generation of Code ('Code Injection') vulnerability in Laborator Kalium kalium allows Code Injection.This issue affects Kalium: from n/a through <= 3.25.