Skip to contentInstawp Team Connect – 1-click Wp Staging & Migration vulnerabilities
- instawp connect – 1-click wp staging & migrationInstaWP Connect <= 0.1.4.1 - Authenticated (Subscriber+) Privilege Escalation via Role-as-Capability Admin Page and API Key Disclosure via 'instawp_sync_tab_roles' Role-as-Capability SettingCVE-2026-1094007.5 High
- instawp connect – 1-click wp staging & migrationInstaWP Connect <= 0.1.3.6 - Unauthenticated Cryptographic Key DisclosureCVE-2026-134577.5 High
- instawp connect – 1-click wp staging & migrationInstaWP Connect <= 0.1.0.85 - Unauthenticated Local PHP File InclusionCVE-2025-2636EPSS 10.6%8.1 High
- instawp connect – 1-click wp staging & migrationInstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.83 - Cross-Site Request Forgery to Local File InclusionCVE-2024-139138.8 High
- instawp connect – 1-click wp staging & migration, connect +1 moreInstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to AdminCVE-2024-63979.8 Critical
- instawp connect – 1-click wp staging & migration, connect +1 moreInstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User CreationCVE-2024-4898Public exploit9.8 Critical
- instawp connect – 1-click wp staging & migration, connect +1 moreInstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File UploadCVE-2024-2667Public exploit9.8 Critical
- instawp connect, connect – 1-click wp staging & migration +1 moreInstaWP Connect <= 0.0.9.18 - Missing Authorization to Unauthenticated Post/Taxonomy/User Add/Change/Delete, Customizer Setting Change, Plugin Installation/Activation/Deactication via events_receiverCVE-2023-39569.8 Critical