VYPR

Cpi Wp Migration

by WordPress

Source repositories

CVEs (1)

  • CVE-2025-11170CriNov 11, 2025
    risk 0.64cvss 9.8epss 0.01

    The WP移行専用プラグイン for CPI plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the Cpiwm_Import_Controller::import function in all versions up to, and including, 1.0.2. This makes it possible for unauthenticated…