Nixpkgs security tracker

Untriaged

Permalink CVE-2025-60202

7.5 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): NONE
Availability impact (A): NONE

created 4 months, 2 weeks ago Activity log

Created suggestion 4 months, 2 weeks ago

WordPress Favorites plugin <= 2.3.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Kyle Phillips Favorites favorites allows PHP Local File Inclusion.This issue affects Favorites: from n/a through <= 2.3.6.

References

Affected products

favorites

=<<= 2.3.6

Matching in nixpkgs

pkgs.gnomeExtensions.favorites-menu

Provide panel menu for favorites

nixos-unstable 22
- nixpkgs-unstable 22
- nixos-unstable-small 22

pkgs.gnomeExtensions.panel-favorites

Add launchers for Favorites to the panel

nixos-unstable 52
- nixpkgs-unstable 52
- nixos-unstable-small 52

pkgs.gnomeExtensions.favorites-to-applications-grid

Keep your favorite applications in your applications grid.

nixos-unstable 1
- nixpkgs-unstable 1
- nixos-unstable-small 1

Package maintainers

@honnip Jung seungwoo <me@honnip.page>