Skip to content
OpenAdvisories

Vendor

InstaWP

22 known vulnerabilities.

Products

InstaWP Connect 11 InstaWP Connect – 1-click WP Staging & Migration 8 String locator 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-4898 Public exploit Scanner template

    InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation

    The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to arbitrary option updates due to a missing authorization checks on the REST API calls in all versions up to, and including, 0.1.0.38. This makes it possible for unauthen…

    InstaWP InstaWP Connect – 1-click WP Staging & Migration Web / CMS
  • Critical 9.8
    CVE-2024-2667 Public exploit Scanner template

    InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload

    The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation in the /wp-json/instawp-connect/v1/config REST API endpoint in all versions up to, and including, 0.1.0.22. T…

    InstaWP InstaWP Connect – 1-click WP Staging & Migration Web / CMS