CVE-2024-4898

CRITICAL EXPLOITED NUCLEI

InstaWP Connect < 0.1.0.38 - Unauthenticated Arbitrary Option Update via REST API

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2024-4898 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 2 public exploits from researchers including cve-2024, gh-ost00. A Nuclei detection template is also available.

AI-analyzed exploit summary The repository provides a technical analysis of CVE-2024-4898, detailing an authentication bypass vulnerability in InstaWP Connect plugin versions <= 0.1.0.38. It includes screenshots of vulnerable code and describes how unauthenticated API access can lead to arbitrary options updates and administrative user creation.

Description

The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to arbitrary option updates due to a missing authorization checks on the REST API calls in all versions up to, and including, 0.1.0.38. This makes it possible for unauthenticated attackers to connect the site to InstaWP API, edit arbitrary site options and create administrator accounts.

Exploits (2)

nomisec WRITEUP
by cve-2024 · remote
https://github.com/cve-2024/CVE-2024-4898-Poc

The repository provides a technical analysis of CVE-2024-4898, detailing an authentication bypass vulnerability in InstaWP Connect plugin versions <= 0.1.0.38. It includes screenshots of vulnerable code and describes how unauthenticated API access can lead to arbitrary options updates and administrative user creation.

Classification
Writeup 80%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38
No auth needed
Prerequisites: Access to the target WordPress site · InstaWP Connect plugin installed and activated
devstral-2 · analyzed Feb 18, 2026 Full analysis →
nomisec WRITEUP
by gh-ost00 · poc
https://github.com/gh-ost00/CVE-2024-4898

The repository provides a technical analysis of CVE-2024-4898, detailing an authentication bypass vulnerability in InstaWP Connect plugin <= 0.1.0.38. It includes screenshots of vulnerable code and describes how unauthenticated API access can lead to arbitrary options updates and administrative user creation.

Classification
Writeup 80%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38
No auth needed
Prerequisites: Access to the target WordPress site · InstaWP Connect plugin installed and activated
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Nuclei Templates (1)

WordPress InstaWP Connect <= 0.1.0.38 - Unauthenticated User Creation
CRITICALby Sourabh-Sahu
FOFA: body="/wp-content/plugins/instawp-connect/"

Scores

CVSS v3 9.8
EPSS 0.9002
EPSS Percentile 99.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

VulnCheck KEV 2024-06-12
CWE
CWE-862
Status published
Products (2)
instawp/InstaWP Connect – 1-click WP Staging & Migration < 0.1.0.38
instawp/instawp_connect < 0.1.0.39
Published Jun 12, 2024
Tracked Since Feb 18, 2026