Skip to content
Noroxi

InstaWP Connect

instawp-connect · plugin

Known security vulnerabilities for InstaWP Connect. Find out in seconds which version runs on your site with WP Lens.

17 known vulnerabilities

5 critical · 4 with public exploit code · latest Aug 13, 2026

Vulnerabilities

  • CVE-2024-6397

    InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to Admin

    Critical 9.8

  • CVE-2024-37228

    WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability

    Critical 9.8

  • CVE-2024-4898

    InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User C

    Critical 9.8

  • CVE-2024-2667

    InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload

    Critical 9.8

  • CVE-2023-3956

    InstaWP Connect <= 0.0.9.18 - Missing Authorization to Unauthenticated Post/Taxonomy/User Add/Change/Delete, Customizer Setting Change, Plugin Installation/Acti

    Critical 9.8

  • CVE-2024-13913

    InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.83 - Cross-Site Request Forgery to Local File Inclusion

    High 8.8

  • CVE-2024-32701

    WordPress InstaWP Connect plugin <= 0.1.0.24 - Broken Access Control vulnerability

    High 8.8

  • CVE-2024-22145

    WordPress InstaWP Connect plugin <= 0.1.0.8 - Arbitrary Option Update to Privilege Escalation vulnerability

    High 8.8

  • CVE-2024-25918

    WordPress InstaWP Connect plugin <= 0.1.0.8 - Remote Code Execution vulnerability

    High 8.8

  • CVE-2024-23507

    WordPress InstaWP Connect plugin <= 0.1.0.9 - SQL Injection vulnerability

    High 8.8

  • CVE-2025-2636

    InstaWP Connect <= 0.1.0.85 - Unauthenticated Local PHP File Inclusion

    High 8.1

  • CVE-2026-13457

    InstaWP Connect <= 0.1.3.6 - Unauthenticated Cryptographic Key Disclosure

    High 7.5

  • CVE-2025-31387

    WordPress InstaWP Connect plugin <= 0.1.0.82 - Local File Inclusion vulnerability

    High 7.5

  • CVE-2025-66068

    WordPress InstaWP Connect plugin <= 0.1.1.9 - Broken Access Control vulnerability

    Medium 6.5

  • CVE-2024-23506

    WordPress InstaWP Connect plugin <= 0.1.0.9 - Sensitive Data Exposure vulnerability

    Medium 6.5

  • CVE-2026-39504

    WordPress InstaWP Connect plugin <= 0.1.2.5 - Broken Access Control vulnerability

    Medium 5.4

  • CVE-2026-73401

    WordPress InstaWP Connect plugin <= 0.1.3.7 - Broken Access Control vulnerability

    Medium 5.3

← Back to directory