Skip to content
InstaWP InstaWP Connect – 1-click WP Staging & Migration
-
CVE-2026-109400
High 7.5
InstaWP Connect <= 0.1.4.1 - Authenticated (Subscriber+) Privilege Escalation via Role-as-Capability Admin Page and API Key Disclosure via 'instawp_sync_tab_roles' Role-as-Capability Setting
0.3%
-
CVE-2026-13457
High 7.5
InstaWP Connect <= 0.1.3.6 - Unauthenticated Cryptographic Key Disclosure
0.9%
-
CVE-2025-2636
High 8.1
InstaWP Connect <= 0.1.0.85 - Unauthenticated Local PHP File Inclusion
10.6%
-
CVE-2024-13913
High 8.8
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.83 - Cross-Site Request Forgery to Local File Inclusion
2.7%
-
CVE-2024-6397
Critical 9.8
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to Admin
0.7%
-
CVE-2024-4898
Critical 9.8
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation
4.2%
-
CVE-2024-2667
Critical 9.8
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload
5.7%
-
CVE-2023-3956
Critical 9.8
InstaWP Connect <= 0.0.9.18 - Missing Authorization to Unauthenticated Post/Taxonomy/User Add/Change/Delete, Customizer Setting Change, Plugin Installation/Activation/Deactication via events_receiver
1.0%