Product by InstaWP

    Instawp Connect

    15 known vulnerabilities in Instawp Connect (InstaWP), 0 of them actively exploited (CISA KEV).

    Key figures

    15

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Instawp Connect (InstaWP)
    CriticalCVE-2024-2667

    InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload

    also in 1 other product

    		9.8
    CriticalCVE-2024-4898

    InstaWP Connect: Missing Authorization

    also in 1 other product

    		9.8
    HighCVE-2024-22145

    InstaWP Connect: Incorrect Privilege Assignment

    		8.8
    CriticalCVE-2023-3956

    InstaWP Connect: Missing Authorization

    also in 1 other product

    		9.8
    CriticalCVE-2024-6397

    InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to Admin

    also in 1 other product

    		9.8
    CriticalCVE-2024-25918

    WordPress InstaWP Connect plugin <= 0.1.0.8 - Remote Code Execution vulnerability

    		9.9
    HighCVE-2026-116399

    WordPress InstaWP Connect plugin <= 0.1.4.2 - Cross Site Request Forgery (CSRF) vulnerability

    		8.8
    CriticalCVE-2024-37228

    WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability

    		10.0
    HighCVE-2024-23507

    WordPress InstaWP Connect plugin <= 0.1.0.9 - SQL Injection vulnerability

    		8.5
    HighCVE-2025-31387

    WordPress InstaWP Connect plugin <= 0.1.0.82 - Local File Inclusion vulnerability

    		7.5
    HighCVE-2024-23506

    WordPress InstaWP Connect plugin <= 0.1.0.9 - Sensitive Data Exposure vulnerability

    		7.7
    MediumCVE-2026-73401

    WordPress InstaWP Connect plugin <= 0.1.3.7 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2025-66068

    WordPress InstaWP Connect plugin <= 0.1.1.9 - Broken Access Control vulnerability

    		6.5
    MediumCVE-2026-39504

    WordPress InstaWP Connect plugin <= 0.1.2.5 - Broken Access Control vulnerability

    		5.4
    HighCVE-2024-32701

    WordPress InstaWP Connect plugin <= 0.1.0.24 - Broken Access Control vulnerability

    		4.3

    All products by InstaWP