Nixpkgs security tracker

Untriaged

Permalink CVE-2026-22412

created 1 month, 2 weeks ago Activity log

Created suggestion 1 month, 2 weeks ago

WordPress Eona theme <= 1.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Eona eona allows PHP Local File Inclusion.This issue affects Eona: from n/a through <= 1.3.

References

https://patchstack.com/database/Wordpress/Theme/eona/vulnerability/wordpress-eo… vdb-entry

Affected products

eona

=<<= 1.3

Matching in nixpkgs

pkgs.lomiri.geonames

Parse and query the geonames database dump

nixos-unstable 0.3.1
- nixpkgs-unstable 0.3.1
- nixos-unstable-small 0.3.1
nixos-25.11 0.3.1
- nixos-25.11-small 0.3.1
- nixpkgs-25.11-darwin 0.3.1

pkgs.vscode-extensions.leonardssh.vscord

Highly customizable Discord Rich Presence extension for Visual Studio Code

nixos-unstable 5.3.9
- nixpkgs-unstable 5.3.9
- nixos-unstable-small 5.3.9
nixos-25.11 5.3.8
- nixos-25.11-small 5.3.8
- nixpkgs-25.11-darwin 5.3.8

Package maintainers

@OPNA2608 Cosima Neidahl <opna2608@protonmail.com>
@ryand56 Ryan Omasta <git@ryand.ca>