Nixpkgs security tracker

Untriaged

Permalink CVE-2026-22414

created 1 month, 2 weeks ago Activity log

Created suggestion 1 month, 2 weeks ago

WordPress Marra theme <= 1.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Marra marra allows PHP Local File Inclusion.This issue affects Marra: from n/a through <= 1.2.

References

https://patchstack.com/database/Wordpress/Theme/marra/vulnerability/wordpress-m… vdb-entry

Affected products

marra

=<<= 1.2

Matching in nixpkgs

pkgs.roomarranger

3D room planning software

nixos-unstable 10.3.4
- nixpkgs-unstable 10.3.4
- nixos-unstable-small 10.3.4
nixos-25.11 10.3.1
- nixos-25.11-small 10.3.1
- nixpkgs-25.11-darwin 10.3.1

Package maintainers

@bellackn Nico Bellack <blcknc@pm.me>

Suggestion detail

References

Affected products

Matching in nixpkgs

pkgs.roomarranger

Package maintainers