Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: kddiwebcommunications Clear all filters
TI-2025-10235 CVE-2025-11170 · GHSA-83mg-q2hx-3hj4

WP移行専用プラグイン for CPI <= 1.0.2 - Unauthenticated Arbitrary File Upload

Priority MEDIUM 50

The WP移行専用プラグイン for CPI plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the Cpiwm_Import_Controller::import function in all versions up to, and including, 1.0.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2025-11-11 No fix listed CWE-434