instawp Vulnerabilities and Affected Products

Open in search

Vulnerabilities associated with InstaWP Connect.

Products

Clear product

Showing 10 vulnerabilities on this page for InstaWP Connect

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

WordPress InstaWP Connect plugin <= 0.1.3.7 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in InstaWP Connect <= 0.1.3.7 versions.

CWE-862Aug 13, 2026
CVSS5.3v3.1EPSS-PoCs0SignalsSTIX

WordPress InstaWP Connect plugin <= 0.1.2.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InstaWP Connect: from n/a through <= 0.1.2.5.

CWE-862Apr 8, 2026
CVSS5.4v3.1EPSS0.165%PoCs0SignalsSTIX

WordPress InstaWP Connect plugin <= 0.1.1.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InstaWP Connect: from n/a through <= 0.1.1.9.

CWE-862Dec 18, 2025
CVSS6.5v3.1EPSS0.208%PoCs0SignalsSTIX

WordPress InstaWP Connect plugin <= 0.1.0.82 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in InstaWP InstaWP Connect instawp-connect allows PHP Local File Inclusion.This issue affects InstaWP Connect: from n/a through <= 0.1.0.82.

CWE-98Mar 31, 2025
CVSS7.5v3.1EPSS0.502%PoCs0SignalsSTIX

WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.38.

CWE-434CWE-94Jun 24, 2024
CVSS10.0v3.1EPSS0.531%PoCs0SignalsSTIX

WordPress InstaWP Connect plugin <= 0.1.0.24 - Broken Access Control vulnerability

Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.24.

CWE-862Jun 9, 2024
CVSS4.3v3.1EPSS0.333%PoCs0SignalsSTIX

WordPress InstaWP Connect plugin <= 0.1.0.8 - Arbitrary Option Update to Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.8.

CWE-266CWE-269May 17, 2024
CVSS8.8v3.1EPSS1.11%PoCs1SignalsSTIX

WordPress InstaWP Connect plugin <= 0.1.0.8 - Remote Code Execution vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.8.

CWE-434CWE-94Apr 3, 2024
CVSS9.9v3.1EPSS0.681%PoCs0SignalsSTIX

WordPress InstaWP Connect plugin <= 0.1.0.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.9.

CWE-89Jan 31, 2024
CVSS8.5v3.1EPSS0.621%PoCs0SignalsSTIX

WordPress InstaWP Connect plugin <= 0.1.0.9 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.9.

CWE-200CWE-201Jan 26, 2024
CVSS7.7v3.1EPSS0.504%PoCs0SignalsSTIX