Skip to content
OpenAdvisories

Vendor

InstaWP

22 known vulnerabilities.

Products

InstaWP Connect 11 InstaWP Connect – 1-click WP Staging & Migration 8 String locator 3
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-73401

    WordPress InstaWP Connect plugin <= 0.1.3.7 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in InstaWP Connect <= 0.1.3.7 versions.

    InstaWP InstaWP Connect
  • Medium 5.4
    CVE-2026-39504

    WordPress InstaWP Connect plugin <= 0.1.2.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InstaWP Connect: from n/a through <= 0.1.2.5.

    InstaWP InstaWP Connect
  • Medium 6.5
    CVE-2025-66068

    WordPress InstaWP Connect plugin <= 0.1.1.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InstaWP Connect: from n/a through <= 0.1.1.9.

    InstaWP InstaWP Connect
  • Medium 6.1
    CVE-2023-6987

    String Locator <= 2.6.5 - Reflected Cross-Site Scripting

    The String locator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sql-column' parameter in all versions up to, and including, 2.6.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthent…

    InstaWP String locator Web / CMS
  • Medium 4.3
    CVE-2024-32701

    WordPress InstaWP Connect plugin <= 0.1.0.24 - Broken Access Control vulnerability

    Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.24.

    InstaWP InstaWP Connect