InstaWP Connect – 1-click WP Staging & Migration

30 known CVEs 40K+ active installs

Scan My Site Free
UNKNOWN: 30
Known Vulnerabilities 30
CVE-2024-6397 UNKNOWN EPSS 0.5%
Published 2024-07-11 · Affected: *
The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 0.1.0.44. This is due to insufficient verificatio
CVE-2024-6397 UNKNOWN EPSS 0.5%
Published 2024-07-11 · Affected: *
The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 0.1.0.44. This is due to insufficient verificatio
CVE-2024-37228 UNKNOWN EPSS 0.4%
Published 2024-06-24 · Affected: *
Unrestricted Upload of File with Dangerous Type vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.38.
CVE-2024-37228 UNKNOWN EPSS 0.4%
Published 2024-06-24 · Affected: *
Unrestricted Upload of File with Dangerous Type vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.38.
CVE-2024-37228 UNKNOWN EPSS 0.4%
Published 2024-06-24 · Affected: *
Unrestricted Upload of File with Dangerous Type vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.38.
CVE-2024-37228 UNKNOWN EPSS 0.4%
Published 2024-06-24 · Affected: *
Unrestricted Upload of File with Dangerous Type vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.38.
CVE-2024-4898 UNKNOWN EPSS 0.9%
Published 2024-06-12 · Affected: *
The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to arbitrary option updates due to a missing authorization checks on the REST API calls in all versions up to, a
CVE-2024-4898 UNKNOWN EPSS 0.9%
Published 2024-06-12 · Affected: *
The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to arbitrary option updates due to a missing authorization checks on the REST API calls in all versions up to, a
CVE-2024-32701 UNKNOWN EPSS 0.3%
Published 2024-06-09 · Affected: *
Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.24.
CVE-2024-32701 UNKNOWN EPSS 0.3%
Published 2024-06-09 · Affected: *
Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.24.
CVE-2024-32701 UNKNOWN EPSS 0.3%
Published 2024-06-09 · Affected: *
Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.24.
CVE-2024-32701 UNKNOWN EPSS 0.3%
Published 2024-06-09 · Affected: *
Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.24.
CVE-2024-22145 UNKNOWN EPSS 0.6%
Published 2024-05-17 · Affected: *
Incorrect Privilege Assignment vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.8.
CVE-2024-22145 UNKNOWN EPSS 0.6%
Published 2024-05-17 · Affected: *
Incorrect Privilege Assignment vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.8.
CVE-2024-22145 UNKNOWN EPSS 0.6%
Published 2024-05-17 · Affected: *
Incorrect Privilege Assignment vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.8.
CVE-2024-22145 UNKNOWN EPSS 0.6%
Published 2024-05-17 · Affected: *
Incorrect Privilege Assignment vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.8.
CVE-2024-2667 UNKNOWN EPSS 0.9%
Published 2024-05-02 · Affected: *
The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation in the /wp-json/instawp-connect/v1/config REST AP
CVE-2024-2667 UNKNOWN EPSS 0.9%
Published 2024-05-02 · Affected: *
The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation in the /wp-json/instawp-connect/v1/config REST AP
CVE-2024-25918 UNKNOWN EPSS 0.5%
Published 2024-04-03 · Affected: *
Improper Control of Generation of Code ('Code Injection') vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.8.
CVE-2024-25918 UNKNOWN EPSS 0.5%
Published 2024-04-03 · Affected: *
Improper Control of Generation of Code ('Code Injection') vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.8.
CVE-2024-23507 UNKNOWN EPSS 0.5%
Published 2024-01-31 · Affected: *
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.
CVE-2024-23507 UNKNOWN EPSS 0.5%
Published 2024-01-31 · Affected: *
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.
CVE-2024-23507 UNKNOWN EPSS 0.5%
Published 2024-01-31 · Affected: *
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.
CVE-2024-23507 UNKNOWN EPSS 0.5%
Published 2024-01-31 · Affected: *
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.
CVE-2024-23506 UNKNOWN EPSS 0.4%
Published 2024-01-27 · Affected: *
Insertion of Sensitive Information Into Sent Data vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.9.
CVE-2024-23506 UNKNOWN EPSS 0.4%
Published 2024-01-27 · Affected: *
Insertion of Sensitive Information Into Sent Data vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.9.
CVE-2024-23506 UNKNOWN EPSS 0.4%
Published 2024-01-27 · Affected: *
Insertion of Sensitive Information Into Sent Data vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.9.
CVE-2024-23506 UNKNOWN EPSS 0.4%
Published 2024-01-27 · Affected: *
Insertion of Sensitive Information Into Sent Data vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.9.
CVE-2023-3956 UNKNOWN EPSS 0.6%
Published 2023-07-27 · Affected: *
The InstaWP Connect plugin for WordPress is vulnerable to unauthorized access of data, modification of data and loss of data due to a missing capability check on the 'events_receiver' function in vers
CVE-2023-3956 UNKNOWN EPSS 0.6%
Published 2023-07-27 · Affected: *
The InstaWP Connect plugin for WordPress is vulnerable to unauthorized access of data, modification of data and loss of data due to a missing capability check on the 'events_receiver' function in vers

Is InstaWP Connect &#8211; 1-click WP Staging &amp; Migration running on your site?

A free scan detects your plugins and flags any that match these CVEs.

Scan My Site Free