Nixpkgs Security Tracker

Dismissed

Permalink CVE-2026-28025

updated 2 weeks, 1 day ago by @mweinelt Activity log

Created automatic suggestion 2 weeks, 3 days ago
@mweinelt removed package stargazer 2 weeks, 1 day ago
@mweinelt dismissed 2 weeks, 1 day ago

WordPress Stargaze theme <= 1.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Stargaze stargaze allows PHP Local File Inclusion.This issue affects Stargaze: from n/a through <= 1.5.

References

https://patchstack.com/database/Wordpress/Theme/stargaze/vulnerability/wordpres… vdb-entry

Affected products

stargaze

=<<= 1.5

Ignored packages (1)

pkgs.stargazer

Fast and easy to use Gemini server

nixos-unstable 1.3.4
- nixpkgs-unstable 1.3.4
- nixos-unstable-small 1.3.4
nixos-25.11 1.3.4
- nixos-25.11-small 1.3.4
- nixpkgs-25.11-darwin 1.3.4

Not in nixpkgs

Suggestion detail

References

Affected products

pkgs.stargazer