Nixpkgs Security Tracker

Dismissed

Permalink CVE-2025-69398

updated 3 weeks, 4 days ago by @LeSuisse Activity log

Created automatic suggestion 1 month ago
@LeSuisse removed
3 packages
- plank
- libsForQt5.plank-player
- plasma5Packages.plank-player
3 weeks, 4 days ago
@LeSuisse dismissed 3 weeks, 4 days ago

WordPress Plank theme <= 1.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Plank plank allows PHP Local File Inclusion.This issue affects Plank: from n/a through <= 1.7.

References

https://patchstack.com/database/Wordpress/Theme/plank/vulnerability/wordpress-p… vdb-entry

Affected products

plank

=<<= 1.7

Ignored packages (3)

pkgs.plank

Elegant, simple, clean dock

nixos-unstable 0.11.89
- nixpkgs-unstable 0.11.89
- nixos-unstable-small 0.11.89
nixos-25.11 0.11.89
- nixos-25.11-small 0.11.89
- nixpkgs-25.11-darwin 0.11.89

pkgs.libsForQt5.plank-player

None

pkgs.plasma5Packages.plank-player