A vulnerability categorized as critical has been discovered in Laborator Oxygen Plugin up to 6.0.8 on WordPress. Affected by this vulnerability is the function
laborator_calc_route. Such manipulation leads to server-side request forgery.
This vulnerability is listed as CVE-2025-12886. The attack may be performed from remote. There is no available exploit.