Nixpkgs Security Tracker

Dismissed

Permalink CVE-2025-67921

9.8 CRITICAL

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): HIGH

updated 2 months, 1 week ago by @LeSuisse Activity log

Created automatic suggestion 2 months, 1 week ago
@LeSuisse removed package colobot 2 months, 1 week ago
@LeSuisse dismissed 2 months, 1 week ago

WordPress Lobo theme < 2.8.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VanKarWai Lobo lobo allows Blind SQL Injection.This issue affects Lobo: from n/a through < 2.8.6.

References

https://vdp.patchstack.com/database/Wordpress/Theme/lobo/vulnerability/wordpres… vdb-entry
https://patchstack.com/database/Wordpress/Theme/lobo/vulnerability/wordpress-lo… vdb-entry

Affected products

lobo

=<< 2.8.6

WP theme not present in nixpkgs

Suggestion detail

References

Affected products