agentprime: instawp-connect-1-click-wp-staging-migrationEvery new CVE for instawp-connect-1-click-wp-staging-migration.https://agentprime.io/CVE-2026-109400: InstaWP Connect <= 0.1.4.1 - Authenticated (Subscriber+) Privilege Escalation via Role-as-Capability Admin Page and API Key Disclosure via 'instawp_sync_tab_roles' Role-as-Capability Settinghttps://agentprime.io/advisories/CVE-2026-109400/https://agentprime.io/advisories/CVE-2026-109400/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 04:27:01 GMTCVECVE-2026-13457: InstaWP Connect <= 0.1.3.6 - Unauthenticated Cryptographic Key Disclosurehttps://agentprime.io/advisories/CVE-2026-13457/https://agentprime.io/advisories/CVE-2026-13457/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 19:37:28 GMTCVECVE-2025-2636: InstaWP Connect <= 0.1.0.85 - Unauthenticated Local PHP File Inclusionhttps://agentprime.io/advisories/CVE-2025-2636/https://agentprime.io/advisories/CVE-2025-2636/CVSS 8.1 (High). Critical: CVSS score 8.1 (7.0 or more) and EPSS 0.11 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Apr 2025 04:21:30 GMTCVEcriticalCVE-2024-13913: InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.83 - Cross-Site Request Forgery to Local File Inclusionhttps://agentprime.io/advisories/CVE-2024-13913/https://agentprime.io/advisories/CVE-2024-13913/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Mar 2025 05:24:04 GMTCVECVE-2024-6397: InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to Adminhttps://agentprime.io/advisories/CVE-2024-6397/https://agentprime.io/advisories/CVE-2024-6397/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jul 2024 03:33:19 GMTCVEcriticalCVE-2024-4898: InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creationhttps://agentprime.io/advisories/CVE-2024-4898/https://agentprime.io/advisories/CVE-2024-4898/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Jun 2024 11:05:07 GMTCVEcriticalCVE-2024-2667: InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Uploadhttps://agentprime.io/advisories/CVE-2024-2667/https://agentprime.io/advisories/CVE-2024-2667/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 16:52:52 GMTCVEcriticalCVE-2023-3956: InstaWP Connect <= 0.0.9.18 - Missing Authorization to Unauthenticated Post/Taxonomy/User Add/Change/Delete, Customizer Setting Change, Plugin Installation/Activation/Deactication via events_receiverhttps://agentprime.io/advisories/CVE-2023-3956/https://agentprime.io/advisories/CVE-2023-3956/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Jul 2023 06:54:14 GMTCVEcritical