CVE Tools
Track your stack

Laborator

2 CVEs tracked since 2020. Since Jun 2020, none of them reached CISA KEV.

Laborator CVEs per month

Jun 2020 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Laborator CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2020-0620
2020-07no snapshot
2020-082 or fewer
2020-091 or fewer
2020-101 or fewer
2020-111 or fewer
2020-122 or fewer
2021-012 or fewer
2021-022 or fewer
2021-03no snapshot
2021-042 or fewer
2021-052 or fewer
2021-062 or fewer
2021-072 or fewer
2021-083 or fewer
2021-092 or fewer
2021-102 or fewer
2021-112 or fewer
2021-122 or fewer
2022-012 or fewer
2022-022 or fewer
2022-033 or fewer
2022-043 or fewer
2022-053 or fewer
2022-063 or fewer
2022-073 or fewer
2022-083 or fewer
2022-093 or fewer
2022-102 or fewer
2022-113 or fewer
2022-123 or fewer
2023-013 or fewer
2023-023 or fewer
2023-03no snapshot
2023-043 or fewer
2023-053 or fewer
2023-064 or fewer
2023-073 or fewer
2023-084 or fewer
2023-093 or fewer
2023-104 or fewer
2023-114 or fewer
2023-124 or fewer
2024-014 or fewer
2024-024 or fewer
2024-034 or fewer
2024-044 or fewer
2024-055 or fewer
2024-064 or fewer
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-108 or fewer

Products

The products that kept showing up in Laborator's monthly top three, with their CVEs summed over those months.

  1. Neon11 month
  2. Xenon11 month

Latest CVEs

The 13 most recently published vulnerabilities affecting Laborator.

  1. CVE-2025-12886Oxygen <= 6.0.8 - Unauthenticated Server-Side Request Forgery via route_path7.2
  2. CVE-2025-69299WordPress Oxygen theme <= 6.0.8 - Server Side Request Forgery (SSRF) vulnerability7.2
  3. CVE-2025-12895Kalium <= 3.29 - Missing Authorization to Unauthenticated Mail Relay via kalium_vc_contact_form_request5.3
  4. CVE-2025-53349WordPress Kalium Theme <= 3.18.3 - Cross Site Scripting (XSS) Vulnerability7.1
  5. CVE-2025-49926WordPress Kalium theme <= 3.25 - Arbitrary Code Execution vulnerability7.2
  6. CVE-2025-53348WordPress Kalium Theme <= 3.18.3 - Broken Access Control Vulnerability5.3
  7. CVE-2025-53347WordPress Kalium Theme <= 3.18.3 - Cross Site Request Forgery (CSRF) Vulnerability4.3
  8. CVE-2024-12781Aurum - WordPress & WooCommerce Shopping Theme <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Demo Content Import4.3
  9. CVE-2020-24075Cross Site Scripting (XSS) vulnerability in Name Input Field in Contact Us form in Laborator Kalium before 3.0.4, allows remote attackers to execute arbitrary code.6.1
  10. CVE-2020-23576Laborator Neon dashboard v3 is affected by stored Cross Site Scripting (XSS) via the chat tab.5.4
  11. CVE-2020-14010The Laborator Xenon theme 1.3 for WordPress allows Reflected XSS via the data/typeahead-generate.php q (aka name) parameter.6.1
  12. CVE-2020-13890The Neon theme 2.0 before 2020-06-03 for Bootstrap allows XSS via an Add Task Input operation in a dashboard.5.4
  13. CVE-2019-20141An XSS issue was discovered in the Laborator Neon theme 2.0 for WordPress via the data/autosuggest-remote.php q parameter.6.1

The record

Peak rank
#191 in Jun 2020
Busiest month shown
Jun 2020, 2 CVEs
Months with a KEV entry
0 since Jun 2020
Monthly snapshots
1 since 2020
Laborator's full record, month by month