Nixpkgs security tracker

Permalink CVE-2023-27456

4.3 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): LOW
Availability impact (A): NONE

updated 1 year, 4 months ago by @LeSuisse Activity log

Created automatic suggestion 1 year, 4 months ago
@LeSuisse dismissed 1 year, 4 months ago

WordPress Total theme <= 2.1.19 - Authenticated Arbitrary Plugin Activation

Missing Authorization vulnerability in HashThemes Total allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Total: from n/a through 2.1.19.

References

https://patchstack.com/database/wordpress/theme/total/vulnerability/wordpress-t… vdb-entry

Affected products

total

=<2.1.19

Matching in nixpkgs

pkgs.autotalent

Real-time pitch correction LADSPA plugin (no MIDI control)

nixos-unstable 0.2
- nixpkgs-unstable 0.2
- nixos-unstable-small 0.2

pkgs.haskellPackages.total

Exhaustive pattern matching using lenses, traversals, and prisms

nixos-unstable 1.0.6
- nixpkgs-unstable 1.0.6
- nixos-unstable-small 1.0.6

pkgs.emacsPackages.total-lines

None

nixos-unstable 20171227.1239
- nixpkgs-unstable 20171227.1239
- nixos-unstable-small 20171227.1239

pkgs.haskellPackages.total-alternative

Alternative interface for total versions of partial function on the Prelude

nixos-unstable 0.1.0.1
- nixpkgs-unstable 0.1.0.1
- nixos-unstable-small 0.1.0.1

pkgs.python311Packages.total-connect-client

Interact with Total Connect 2 alarm systems

nixos-unstable 2024.12
- nixpkgs-unstable 2024.12
- nixos-unstable-small 2024.12

pkgs.python312Packages.total-connect-client