Nixpkgs Security Tracker

Dismissed

Permalink CVE-2025-60042

8.1 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): NONE

updated 2 months, 1 week ago by @LeSuisse Activity log

Created automatic suggestion 2 months, 1 week ago
@LeSuisse removed package vscode-extensions.chrischinchilla.vscode-pandoc 2 months, 1 week ago
@LeSuisse dismissed 2 months, 1 week ago

WordPress Chinchilla theme <= 1.16 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Chinchilla chinchilla allows PHP Local File Inclusion.This issue affects Chinchilla: from n/a through <= 1.16.

References

https://vdp.patchstack.com/database/Wordpress/Theme/chinchilla/vulnerability/wo… vdb-entry
https://patchstack.com/database/Wordpress/Theme/chinchilla/vulnerability/wordpr… vdb-entry

Affected products

chinchilla

=<<= 1.16

WP theme not present in nixpkgs

Suggestion detail

References

Affected products