CVE Tools
Track your stack

Laborator

2 CVEs tracked since 2020. Since Jun 2020, none of them reached CISA KEV.

Laborator CVEs per month

Jun 2020 to Jun 2020. Point at a month, or focus the strip and use the arrow keys.
Laborator CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2020-0620

Products

The products that kept showing up in Laborator's monthly top three, with their CVEs summed over those months.

  1. Neon11 month
  2. Xenon11 month

Latest CVEs

The 13 most recently published vulnerabilities affecting Laborator.

  1. CVE-2025-12886Oxygen <= 6.0.8 - Unauthenticated Server-Side Request Forgery via route_path7.2
  2. CVE-2025-69299WordPress Oxygen theme <= 6.0.8 - Server Side Request Forgery (SSRF) vulnerability7.2
  3. CVE-2025-12895Kalium <= 3.29 - Missing Authorization to Unauthenticated Mail Relay via kalium_vc_contact_form_request5.3
  4. CVE-2025-53349WordPress Kalium Theme <= 3.18.3 - Cross Site Scripting (XSS) Vulnerability7.1
  5. CVE-2025-49926WordPress Kalium theme <= 3.25 - Arbitrary Code Execution vulnerability7.2
  6. CVE-2025-53348WordPress Kalium Theme <= 3.18.3 - Broken Access Control Vulnerability5.3
  7. CVE-2025-53347WordPress Kalium Theme <= 3.18.3 - Cross Site Request Forgery (CSRF) Vulnerability4.3
  8. CVE-2024-12781Aurum - WordPress & WooCommerce Shopping Theme <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Demo Content Import4.3
  9. CVE-2020-24075Cross Site Scripting (XSS) vulnerability in Name Input Field in Contact Us form in Laborator Kalium before 3.0.4, allows remote attackers to execute arbitrary code.6.1
  10. CVE-2020-23576Laborator Neon dashboard v3 is affected by stored Cross Site Scripting (XSS) via the chat tab.5.4
  11. CVE-2020-14010The Laborator Xenon theme 1.3 for WordPress allows Reflected XSS via the data/typeahead-generate.php q (aka name) parameter.6.1
  12. CVE-2020-13890The Neon theme 2.0 before 2020-06-03 for Bootstrap allows XSS via an Add Task Input operation in a dashboard.5.4
  13. CVE-2019-20141An XSS issue was discovered in the Laborator Neon theme 2.0 for WordPress via the data/autosuggest-remote.php q parameter.6.1

The record

Peak rank
#191 in Jun 2020
Busiest month shown
Jun 2020, 2 CVEs
Months with a KEV entry
0 since Jun 2020
Monthly snapshots
1 since 2020
Laborator's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store