Login Request a demo
IC
Product
InstaWP Connect
by InstaWP · last CVE Oct 29, 2026
15
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 5High 6Medium 4Low 0
Severity
All severities15Critical5High6Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add InstaWP Connect to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-6397
9.8
1%
Jul 11
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to Admin
Affected: before 0.1.0.45
CVE-2024-37228
9.8
1%
Jun 24
WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability
Affected: through 0.1.0.38
CVE-2024-4898
9.8
4%
Jun 12
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation
Affected: before 0.1.0.39
CVE-2024-2667
9.8
6%
May 2
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload
Affected: before 0.1.0.23
CVE-2023-3956
9.8
1%
Jul 27
The InstaWP Connect plugin for WordPress is vulnerable to unauthorized access of data, modification of data and loss of data due to a missing capability check on the…
Affected: through 0.0.9.18
CVE-2026-116399
New
8.8–Oct 29
WordPress InstaWP Connect plugin <= 0.1.4.2 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 0.1.4.2
CVE-2024-32701
8.8
0%
Jun 9
WordPress InstaWP Connect plugin <= 0.1.0.24 - Broken Access Control vulnerability
Affected: through 0.1.0.24
CVE-2024-22145
8.8
1%
May 17
WordPress InstaWP Connect plugin <= 0.1.0.8 - Arbitrary Option Update to Privilege Escalation vulnerability
Affected: through 0.1.0.8
CVE-2024-25918
8.8
1%
Apr 3
WordPress InstaWP Connect plugin <= 0.1.0.8 - Remote Code Execution vulnerability
Affected: through 0.1.0.8
CVE-2024-23507
8.8
1%
Jan 31
WordPress InstaWP Connect plugin <= 0.1.0.9 - SQL Injection vulnerability
Affected: through 0.1.0.9
CVE-2025-31387
7.5
1%
Mar 31
WordPress InstaWP Connect plugin <= 0.1.0.82 - Local File Inclusion vulnerability
Affected: through 0.1.0.82
CVE-2025-66068
6.5
0%
Dec 18
WordPress InstaWP Connect plugin <= 0.1.1.9 - Broken Access Control vulnerability
Affected: through 0.1.1.9
CVE-2024-23506
6.5
1%
Jan 26
WordPress InstaWP Connect plugin <= 0.1.0.9 - Sensitive Data Exposure vulnerability
Affected: through 0.1.0.9
CVE-2026-39504
5.4
0%
Apr 8
WordPress InstaWP Connect plugin <= 0.1.2.5 - Broken Access Control vulnerability
Affected: through 0.1.2.5
CVE-2026-73401
5.3
0%
Aug 13
WordPress InstaWP Connect plugin <= 0.1.3.7 - Broken Access Control vulnerability
Affected: through 0.1.3.7
Showing 15