A vulnerability categorized as critical has been discovered in Laborator Oxygen Plugin up to 6.0.8 on WordPress. Affected by this vulnerability is the function laborator_calc_route. Such manipulation leads to server-side request forgery.

This vulnerability is listed as CVE-2025-12886. The attack may be performed from remote. There is no available exploit.