Advisories · Technology

InstaWP Connect.

Every CVE that names InstaWP Connect among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-116399 CVE record

CVSS 8.8 High

WordPress InstaWP Connect plugin <= 0.1.4.2 - Cross Site Request Forgery (CSRF) vulnerability
- InstaWP Connect
- Cross-site request forgery (CSRF)
Not analysed yet 29 Oct 2026
CVE-2026-114743 CVE record

CVSS 3.1 Low

InstaWP Connect < 0.1.4.2 - Authenticated Plugin Settings Update via instawp_update_settings
- InstaWP Connect
- Broken access control
Not analysed yet 25 Oct 2026
CVE-2026-73401 CVE record

CVSS 5.3 Medium

WordPress InstaWP Connect plugin <= 0.1.3.7 - Broken Access Control vulnerability
- InstaWP Connect
- Broken access control
Not analysed yet 13 Aug 2026
CVE-2026-39504 CVE record

CVSS 5.4 Medium

WordPress InstaWP Connect plugin <= 0.1.2.5 - Broken Access Control vulnerability
- InstaWP Connect
- Broken access control
Not analysed yet 8 Apr 2026
CVE-2025-66068 CVE record

CVSS 6.5 Medium

WordPress InstaWP Connect plugin <= 0.1.1.9 - Broken Access Control vulnerability
- InstaWP Connect
- Broken access control
Not analysed yet 18 Dec 2025
CVE-2025-31387 CVE record

CVSS 7.5 High

WordPress InstaWP Connect plugin <= 0.1.0.82 - Local File Inclusion vulnerability
- InstaWP Connect
- File inclusion
Not analysed yet 31 Mar 2025
CVE-2024-37228 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability
- InstaWP Connect
- Unrestricted file upload
Not analysed yet 24 Jun 2024
CVE-2024-32701 CVE record

CVSS 4.3 Medium

WordPress InstaWP Connect plugin <= 0.1.0.24 - Broken Access Control vulnerability
- InstaWP Connect
- Broken access control
Not analysed yet 9 Jun 2024
CVE-2024-22145 CVE record

CVSS 8.8 High

WordPress InstaWP Connect plugin <= 0.1.0.8 - Arbitrary Option Update to Privilege Escalation vulnerability
- InstaWP Connect
- Privilege escalation
Not analysed yet 17 May 2024
CVE-2024-25918 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

WordPress InstaWP Connect plugin <= 0.1.0.8 - Remote Code Execution vulnerability
- InstaWP Connect
- Code injection
Not analysed yet 3 Apr 2024
CVE-2024-23507 CVE record

CVSS 8.5 High

WordPress InstaWP Connect plugin <= 0.1.0.9 - SQL Injection vulnerability
- InstaWP Connect
- SQL injection
Not analysed yet 31 Jan 2024
CVE-2024-23506 CVE record

CVSS 7.7 High

WordPress InstaWP Connect plugin <= 0.1.0.9 - Sensitive Data Exposure vulnerability
- InstaWP Connect
- Information disclosure
Not analysed yet 26 Jan 2024