Dismissed
Permalink
CVE-2026-28053
8.1 HIGH
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): HIGH
- Privileges required (PR): NONE
- User interaction (UI): NONE
- Scope (S): UNCHANGED
- Confidentiality impact (C): HIGH
- Integrity impact (I): HIGH
- Availability impact (A): HIGH
by @mweinelt Activity log
- Created automatic suggestion
-
@mweinelt
removed
2 packages
- yaziPlugins.miller
- miller
- @mweinelt dismissed
WordPress Miller theme <= 1.3.3 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Miller christine-miller allows PHP Local File Inclusion.This issue affects Miller: from n/a through <= 1.3.3.
References
Affected products
christine-miller
- =<<= 1.3.3
Ignored packages (2)
pkgs.miller
Like awk, sed, cut, join, and sort for data formats such as CSV, TSV, JSON, JSON Lines, and positionally-indexed
pkgs.yaziPlugins.miller
Miller, now in yazi
-
nixos-unstable 0-unstable-2025-04-17
- nixpkgs-unstable 0-unstable-2025-04-17
- nixos-unstable-small 0-unstable-2025-04-17
-
nixos-25.11 0-unstable-2025-04-17
- nixos-25.11-small 0-unstable-2025-04-17
- nixpkgs-25.11-darwin 0-unstable-2025-04-17