Login Request a demo
IC
Product
InstaWP Connect
by InstaWP · last CVE Oct 29, 2026
15
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 5High 6Medium 4Low 0
Severity
All severities15Critical5High6Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add InstaWP Connect to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-6397
9.8
1%
Jul 11
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to Admin
Affected: before 0.1.0.45
CVE-2024-37228
9.8
1%
Jun 24
WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability
Affected: through 0.1.0.38
CVE-2024-4898
9.8
4%
Jun 12
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation
Affected: before 0.1.0.39
CVE-2024-2667
9.8
6%
May 2
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload
Affected: before 0.1.0.23
CVE-2023-3956
9.8
1%
Jul 27
InstaWP Connect <= 0.0.9.18 - Missing Authorization to Unauthenticated Post/Taxonomy/User Add/Change/Delete, Customizer Setting Change, Plugin Installation/Activation/Deactication via events_receiver
Affected: through 0.0.9.18
Showing 5