Security
فارسی
All products

instawp-connect

WordPress · Plugin
21 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.4.2 - Cross-Site Request ForgeryCVE-2026-116399 instawp-connect WordPress Medium Fix reported
InstaWP Connect <= 0.1.4.1 - Missing AuthorizationCVE-2026-114743 instawp-connect WordPress Medium Fix reported
InstaWP Connect <= 0.1.4.1 - Authenticated (Subscriber+) Privilege Escalation via Role-as-Capability Admin Page and API Key Disclosure via 'instawp_sync_tab_roles' Role-as-Capability SettingCVE-2026-109400 instawp-connect WordPress High Fix reported
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.3.7 - Missing AuthorizationCVE-2026-73401 instawp-connect WordPress Medium Fix reported
InstaWP Connect <= 0.1.3.6 - Unauthenticated Cryptographic Key DisclosureCVE-2026-13457 instawp-connect WordPress High Fix reported
InstaWP Connect <= 0.1.2.5 - Missing AuthorizationCVE-2026-39504 instawp-connect WordPress Medium Fix reported
InstaWP Connect <= 0.1.1.9 - Missing AuthorizationCVE-2025-66068 instawp-connect WordPress Medium Fix reported
InstaWP Connect <= 0.1.0.85 - Unauthenticated Local PHP File InclusionCVE-2025-2636 instawp-connect WordPress High Fix reported
InstaWP Connect <= 0.1.0.82 - Unauthenticated Local File InclusionCVE-2025-31387 instawp-connect WordPress Critical Fix reported
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.83 - Cross-Site Request Forgery to Local File InclusionCVE-2024-13913 instawp-connect WordPress High Fix reported
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to AdminCVE-2024-6397 instawp-connect WordPress Critical Fix reported
InstaWP Connect <= 0.1.0.38 - Unauthenticated Arbitrary File UploadCVE-2024-37228 instawp-connect WordPress Critical Fix reported
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User CreationCVE-2024-4898 instawp-connect WordPress Critical Fix reported
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File UploadCVE-2024-2667 instawp-connect WordPress Critical Fix reported
InstaWP Connect <= 0.1.0.24 - Missing AuthorizationCVE-2024-32701 instawp-connect WordPress Medium Fix reported
InstaWP Connect <= 0.1.0.8 - Authenticated (Subscriber+) Remote Code ExecutionCVE-2024-25918 instawp-connect WordPress High Fix reported
InstaWP Connect <= 0.1.0.9 - Missing Authorization to Sensitive Information DislcosureCVE-2024-23506 instawp-connect WordPress Medium Fix reported
InstaWP Connect <= 0.1.0.9 - Authenticated (Subscriber+) SQL InjectionCVE-2024-23507 instawp-connect WordPress High Fix reported
InstaWP Connect <= 0.1.0.8 - Missing Authorization to Arbitrary Options UpdateCVE-2024-22145 instawp-connect WordPress High Fix reported
InstaWP Connect <= 0.1.0.8 - Cross-Site Request Forgery via create_file_db_manager instawp-connect WordPress Medium Fix reported