WordPress security by component

Oxygen - WooCommerce WordPress Theme

Theme description

Oxygen - WooCommerce WordPress Theme is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Mar 28, 2026; the highest CVE/CNA score is 7.2.

Theme slug: oxygen-theme

Latest vulnerability

CVE-2025-12886: Oxygen - WooCommerce WordPress Theme: Server-side request forgery

Oxygen - WooCommerce WordPress Theme is affected by server-side request forgery. The vulnerable path is reachable without authentication. The vulnerable server can be induced to make attacker-selected network requests. The published affected range is <= 6.0.8.

PublishedMar 28, 2026

Known safe version> 6.0.8

		Safe version
Mar 28, 2026	CVE-2025-12886 Oxygen - WooCommerce WordPress Theme: Server-side request forgery Oxygen - WooCommerce WordPress Theme is affected by server-side request forgery. The vulnerable path is reachable without authentication. The vulnerable server can be induced to make attacker-selected network requests. The published affected range is <= 6.0.8.	> 6.0.8	CVE7.2 NVDPending