Nixpkgs security tracker

Untriaged

Permalink CVE-2025-69399

created 2 months ago Activity log

Created suggestion 2 months ago

WordPress Cobble theme <= 1.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Cobble cobble allows PHP Local File Inclusion.This issue affects Cobble: from n/a through <= 1.7.

References

https://patchstack.com/database/Wordpress/Theme/cobble/vulnerability/wordpress-… vdb-entry

Affected products

cobble

=<<= 1.7

Matching in nixpkgs

pkgs.python312Packages.cobble

Create Python data objects

nixos-25.11 0.1.4
- nixos-25.11-small 0.1.4
- nixpkgs-25.11-darwin 0.1.4

pkgs.python313Packages.cobble

Create Python data objects

nixos-unstable 0.1.4
- nixpkgs-unstable 0.1.4
- nixos-unstable-small 0.1.4
nixos-25.11 0.1.4
- nixos-25.11-small 0.1.4
- nixpkgs-25.11-darwin 0.1.4

pkgs.python314Packages.cobble

Create Python data objects

nixos-unstable 0.1.4
- nixpkgs-unstable 0.1.4
- nixos-unstable-small 0.1.4

Package maintainers

@drupol Pol Dellaiera <pol.dellaiera@protonmail.com>

Suggestion detail

References

Affected products

Matching in nixpkgs

pkgs.python312Packages.cobble

pkgs.python313Packages.cobble

pkgs.python314Packages.cobble

Package maintainers