Instawp String Locator vulnerabilities

• instawp string locator String Locator < 2.6.8 - Unauthenticated PHP Object Injection via Database Editor CVE-2026-97188 8.8 HighOctober 7, 2026
• instawp string locator String Locator <= 2.6.6 - Unauthenticated PHP Object Injection CVE-2024-10936 8.8 HighJanuary 21, 2025
• instawp string locator String Locator <= 2.6.5 - Reflected Cross-Site Scripting CVE-2023-6987 6.1 MediumAugust 24, 2024
• instawp string locator String Locator <= 2.5.0 - Cross-Site Request Forgery to PHAR Deserialization CVE-2022-2434 8.8 HighSeptember 6, 2022
• instawp string locator, string locator project locator +1 more String Locator < 2.5.0 - Admin+ Arbitrary File Read CVE-2022-0493 4.9 MediumMarch 28, 2022