Kddiwebcommunications vulnerabilities
We track 1 vulnerability in Kddiwebcommunications products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2025.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Kddiwebcommunications vulnerabilities
- 9.8 Critical severity
WP移行専用プラグイン for CPI: Unrestricted Upload of File with Dangerous Type
The WP移行専用プラグイン for CPI plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the Cpiwm_Import_Controller::import function in all versions up to, and including, 1.0.2. This makes it possible for unauthenticated att