Product by InstaWP

    Instawp Connect – 1-click Wp Staging & Migration

    8 known vulnerabilities in Instawp Connect – 1-click Wp Staging & Migration (InstaWP), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Instawp Connect – 1-click Wp Staging & Migration (InstaWP)
    CriticalCVE-2024-2667

    InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload

    also in 1 other product

    		9.8
    HighCVE-2025-2636

    InstaWP Connect <= 0.1.0.85 - Unauthenticated Local PHP File Inclusion

    		8.1
    CriticalCVE-2024-4898

    InstaWP Connect: Missing Authorization

    also in 1 other product

    		9.8
    HighCVE-2024-13913

    InstaWP Connect: Cross-Site Request Forgery (CSRF)

    		8.8
    HighCVE-2026-13457

    InstaWP Connect <= 0.1.3.6 - Unauthenticated Cryptographic Key Disclosure

    		7.5
    CriticalCVE-2023-3956

    InstaWP Connect: Missing Authorization

    also in 1 other product

    		9.8
    CriticalCVE-2024-6397

    InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to Admin

    also in 1 other product

    		9.8
    HighCVE-2026-109400

    InstaWP Connect: Improper Privilege Management

    		7.5

    All products by InstaWP