InstaWP Instawp Connect any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs

CVE-2024-37228

WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability

Published 2024-06-24 · Modified

10.0EPSS 0.005

CVE-2024-25918

WordPress InstaWP Connect plugin <= 0.1.0.8 - Remote Code Execution vulnerability

Published 2024-04-03 · Modified

9.9EPSS 0.007

CVE-2024-2667

InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload

Published 2024-05-02 · Modified

9.8EPSS 0.058

CVE-2024-4898

InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation

Published 2024-06-12 · Modified

9.8EPSS 0.042

CVE-2023-3956

InstaWP Connect <= 0.0.9.18 - Missing Authorization to Unauthenticated Post/Taxonomy/User Add/Change/Delete, Customizer Setting Change, Plugin Installation/Activation/Deactication via events_receiver

Published 2023-07-27 · Modified

9.8EPSS 0.010

CVE-2024-6397

InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to Admin

Published 2024-07-11 · Modified

9.8EPSS 0.007

CVE-2024-22145

WordPress InstaWP Connect plugin <= 0.1.0.8 - Arbitrary Option Update to Privilege Escalation vulnerability

Published 2024-05-17 · Modified

8.8EPSS 0.011

CVE-2024-23507

WordPress InstaWP Connect plugin <= 0.1.0.9 - SQL Injection vulnerability