Nixpkgs security tracker

Untriaged

Permalink CVE-2025-69398

created 2 months ago Activity log

Created suggestion 2 months ago

WordPress Plank theme <= 1.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Plank plank allows PHP Local File Inclusion.This issue affects Plank: from n/a through <= 1.7.

References

https://patchstack.com/database/Wordpress/Theme/plank/vulnerability/wordpress-p… vdb-entry

Affected products

plank

=<<= 1.7

Matching in nixpkgs

pkgs.plank

Elegant, simple, clean dock

nixos-unstable 0.11.89
- nixpkgs-unstable 0.11.89
- nixos-unstable-small 0.11.89
nixos-25.11 0.11.89
- nixos-25.11-small 0.11.89
- nixpkgs-25.11-darwin 0.11.89

pkgs.libsForQt5.plank-player

None

pkgs.plasma5Packages.plank-player