Nixpkgs security tracker

Untriaged

Permalink CVE-2026-28023

created 1 month, 2 weeks ago Activity log

Created suggestion 1 month, 2 weeks ago

WordPress Nuts theme <= 1.10 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Nuts nuts allows PHP Local File Inclusion.This issue affects Nuts: from n/a through <= 1.10.

References

https://patchstack.com/database/Wordpress/Theme/nuts/vulnerability/wordpress-nu… vdb-entry

Affected products

nuts

=<<= 1.10

Matching in nixpkgs

pkgs.typstPackages.nutshell

Template for resumes

nixos-unstable 0.1.1
- nixpkgs-unstable 0.1.1
- nixos-unstable-small 0.1.1
nixos-25.11 0.1.1
- nixos-25.11-small 0.1.1
- nixpkgs-25.11-darwin 0.1.1

pkgs.typstPackages.nutshell_0_1_0

Template for promotional postcards

nixos-unstable 0.1.0
- nixpkgs-unstable 0.1.0
- nixos-unstable-small 0.1.0
nixos-25.11 0.1.0
- nixos-25.11-small 0.1.0
- nixpkgs-25.11-darwin 0.1.0

pkgs.typstPackages.nutshell_0_1_1