CVE-2025-69299

Microsoft · Published February 22, 2026

8.3

CVSS v3.1

HIGH

Patch availableGet patch

Description

WordPress Oxygen theme <= 6.0.8 - Server Side Request Forgery (SSRF) vulnerability. WordPress Oxygen theme <= 6.0.8 - Server Side Request Forgery (SSRF) vulnerability

Affected Products

azl3 doxygen 1.9.8-2 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L/E:U