Skip to contentInstawp Connect vulnerabilities
- instawp connectWordPress InstaWP Connect plugin <= 0.1.4.2 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-1163998.8 High
- instawp connect, unknown instawp connect +1 moreInstaWP Connect < 0.1.4.2 - Authenticated Plugin Settings Update via instawp_update_settingsCVE-2026-1147433.1 Low
- instawp connect – 1-click wp staging & migrationInstaWP Connect <= 0.1.4.1 - Authenticated (Subscriber+) Privilege Escalation via Role-as-Capability Admin Page and API Key Disclosure via 'instawp_sync_tab_roles' Role-as-Capability SettingCVE-2026-1094007.5 High
- instawp connectWordPress InstaWP Connect plugin <= 0.1.3.7 - Broken Access Control vulnerabilityCVE-2026-734015.3 Medium
- instawp connect – 1-click wp staging & migrationInstaWP Connect <= 0.1.3.6 - Unauthenticated Cryptographic Key DisclosureCVE-2026-134577.5 High
- instawp connectWordPress InstaWP Connect plugin <= 0.1.2.5 - Broken Access Control vulnerabilityCVE-2026-395045.4 Medium
- instawp connectWordPress InstaWP Connect plugin <= 0.1.1.9 - Broken Access Control vulnerabilityCVE-2025-660686.5 Medium
- instawp connect – 1-click wp staging & migrationInstaWP Connect <= 0.1.0.85 - Unauthenticated Local PHP File InclusionCVE-2025-2636EPSS 10.6%8.1 High
- instawp connectWordPress InstaWP Connect plugin <= 0.1.0.82 - Local File Inclusion vulnerabilityCVE-2025-313877.5 High
- instawp connect – 1-click wp staging & migrationInstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.83 - Cross-Site Request Forgery to Local File InclusionCVE-2024-139138.8 High
- instawp connect – 1-click wp staging & migration, connect +1 moreInstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to AdminCVE-2024-63979.8 Critical
- instawp connectWordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerabilityCVE-2024-3722810.0 Critical
- instawp connect – 1-click wp staging & migration, connect +1 moreInstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User CreationCVE-2024-4898Public exploit9.8 Critical
- instawp connectWordPress InstaWP Connect plugin <= 0.1.0.24 - Broken Access Control vulnerabilityCVE-2024-327014.3 Medium
- instawp connectWordPress InstaWP Connect plugin <= 0.1.0.8 - Arbitrary Option Update to Privilege Escalation vulnerabilityCVE-2024-22145Public exploit8.8 High
- instawp connect – 1-click wp staging & migration, connect +1 moreInstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File UploadCVE-2024-2667Public exploit9.8 Critical
- instawp connectWordPress InstaWP Connect plugin <= 0.1.0.8 - Remote Code Execution vulnerabilityCVE-2024-259189.9 Critical
- instawp connectWordPress InstaWP Connect plugin <= 0.1.0.9 - SQL Injection vulnerabilityCVE-2024-235078.5 High
- instawp connectWordPress InstaWP Connect plugin <= 0.1.0.9 - Sensitive Data Exposure vulnerabilityCVE-2024-235067.7 High
- instawp connect, connect – 1-click wp staging & migration +1 moreInstaWP Connect <= 0.0.9.18 - Missing Authorization to Unauthenticated Post/Taxonomy/User Add/Change/Delete, Customizer Setting Change, Plugin Installation/Activation/Deactication via events_receiverCVE-2023-39569.8 Critical