Nixpkgs Security Tracker

Untriaged

Permalink CVE-2023-27456

4.3 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): LOW
Availability impact (A): NONE

created 6 months ago

WordPress Total theme <= 2.1.19 - Authenticated Arbitrary Plugin Activation

Missing Authorization vulnerability in HashThemes Total allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Total: from n/a through 2.1.19.

References

https://patchstack.com/database/wordpress/theme/total/vulnerability/wordpress-t… vdb-entry

Affected products

total

=<2.1.19

Matching in nixpkgs

pkgs.autotalent

Real-time pitch correction LADSPA plugin (no MIDI control)

nixos-unstable -
- nixpkgs-unstable 0.2

pkgs.haskellPackages.total

Exhaustive pattern matching using lenses, traversals, and prisms

nixos-unstable -
- nixpkgs-unstable 1.0.6

pkgs.haskellPackages.total-alternative

Alternative interface for total versions of partial function on the Prelude

nixos-unstable -
- nixpkgs-unstable 0.1.0.1

pkgs.gnomeExtensions.net-totals-simplified

A Net totals extension that only displays totals. Forked from Net Speed extension (netspeedsimplified@prateekmedia.extension) With Loads of Customization, version 43

nixos-unstable -
- nixpkgs-unstable 3

pkgs.python312Packages.total-connect-client

Interact with Total Connect 2 alarm systems

nixos-unstable -
- nixpkgs-unstable 2025.5

pkgs.python313Packages.total-connect-client