Nixpkgs Security Tracker

Dismissed

Permalink CVE-2026-22372

8.1 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): HIGH
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): HIGH

updated 3 weeks, 4 days ago by @LeSuisse Activity log

Created automatic suggestion 1 month ago
@LeSuisse removed package visidata 3 weeks, 4 days ago
@LeSuisse dismissed 3 weeks, 4 days ago

WordPress Isida theme <= 1.4.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Isida isida allows PHP Local File Inclusion.This issue affects Isida: from n/a through <= 1.4.2.

References

https://patchstack.com/database/Wordpress/Theme/isida/vulnerability/wordpress-i… vdb-entry

Affected products

isida

=<<= 1.4.2

Ignored packages (1)

pkgs.visidata

Interactive terminal multitool for tabular data

nixos-unstable 3.3
- nixpkgs-unstable 3.3
- nixos-unstable-small 3.3
nixos-25.11 3.3
- nixos-25.11-small 3.3
- nixpkgs-25.11-darwin 3.3

WP theme not present in nixpkgs

Suggestion detail

References

Affected products

pkgs.visidata