Critical · 9.9 CVE-2024-25918 EUVD-2024-23220GHSA-cmmv-w3j8-5hm4

WordPress InstaWP Connect plugin <= 0.1.0.8 - Remote Code Execution vulnerability

Published Apr 3, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: InstaWP Product: InstaWP Connect

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.8.

Affected products

Vendor	Product	Affected	Fixed
InstaWP	InstaWP Connect	≤ 0.1.0.8	—

References

https://patchstack.com/database/Wordpress/Plugin/instawp-connect/vulnerability/wordpress-instawp-connect-plugin-0-1-0-8-remote-code-execution-vulnerability?_s_id=cve vdb-entry