Permalink
CVE-2026-28053
8.1 HIGH
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): HIGH
- Privileges required (PR): NONE
- User interaction (UI): NONE
- Scope (S): UNCHANGED
- Confidentiality impact (C): HIGH
- Integrity impact (I): HIGH
- Availability impact (A): HIGH
Activity log
- Created suggestion
WordPress Miller theme <= 1.3.3 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Miller christine-miller allows PHP Local File Inclusion.This issue affects Miller: from n/a through <= 1.3.3.
References
Affected products
christine-miller
- =<<= 1.3.3
Matching in nixpkgs
pkgs.miller
Like awk, sed, cut, join, and sort for data formats such as CSV, TSV, JSON, JSON Lines, and positionally-indexed
pkgs.yaziPlugins.miller
Miller, now in yazi
-
nixos-unstable 0-unstable-2025-04-17
- nixpkgs-unstable 0-unstable-2025-04-17
- nixos-unstable-small 0-unstable-2025-04-17
-
nixos-25.11 0-unstable-2025-04-17
- nixos-25.11-small 0-unstable-2025-04-17
- nixpkgs-25.11-darwin 0-unstable-2025-04-17
Package maintainers
-
@mstarzyk Maciek Starzyk <mstarzyk@gmail.com>
-
@khaneliman Austin Horstman <khaneliman12@gmail.com>