Plugin icon

InstaWP Connect – 1-click WP Staging & Migration

instawp-connect

Vulnerabilities:

15

Last Updated:

January 21, 2026

Active Installs:

40000

Published
Title
Fixed in
CVSS
Published
2025-12-12
Title
InstaWP Connect < 0.1.2.0 - Missing Authorization
Fixed in
Fixed in 0.1.2.0
CVSS
5.3 (medium)
Published
2025-04-10
Title
InstaWP Connect < 0.1.0.86 - Unauthenticated Local PHP File Inclusion
Fixed in
Fixed in 0.1.0.86
CVSS
8.1 (high)
Published
2025-03-29
Title
InstaWP Connect < 0.1.0.83 - Unauthenticated Local File Inclusion
Fixed in
Fixed in 0.1.0.83
CVSS
9.8 (critical)
Published
2025-03-13
Title
InstaWP Connect – 1-click WP Staging & Migration < 0.1.0.84 - Cross-Site Request Forgery to Local File Inclusion
Fixed in
Fixed in 0.1.0.84
CVSS
8.8 (high)
Published
2024-07-10
Title
InstaWP Connect – 1-click WP Staging & Migration < 0.1.0.45 - Authentication Bypass to Admin
Fixed in
Fixed in 0.1.0.45
CVSS
9.8 (critical)
Published
2024-06-21
Title
InstaWP Connect < 0.1.0.39 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 0.1.0.39
CVSS
10 (critical)
Published
2024-06-11
Title
InstaWP Connect – 1-click WP Staging & Migration < 0.1.0.39 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation
Fixed in
Fixed in 0.1.0.39
CVSS
9.8 (critical)
Published
2024-04-22
Title
InstaWP Connect < 0.1.0.25 - Missing Authorization
Fixed in
Fixed in 0.1.0.25
CVSS
4.3 (medium)
Published
2024-04-12
Title
InstaWP Connect – 1-click WP Staging & Migration < 0.1.0.23 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 0.1.0.23
CVSS
9.8 (critical)
Published
2024-02-14
Title
InstaWP Connect < 0.1.0.9 - Authenticated (Subscriber+) Remote Code Execution
Fixed in
Fixed in 0.1.0.9
CVSS
8.8 (high)
Published
2024-01-24
Title
InstaWP Connect < 0.1.0.10 - Missing Authorization to Sensitive Information Dislcosure
Fixed in
Fixed in 0.1.0.10
CVSS
4.3 (medium)
Published
2024-01-24
Title
InstaWP Connect < 0.1.0.10 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 0.1.0.10
CVSS
8.8 (high)
Published
2024-01-17
Title
InstaWP Connect < 0.1.0.9 - Missing Authorization to Arbitrary Options Update
Fixed in
Fixed in 0.1.0.9
CVSS
8.8 (high)
Published
2024-01-12
Title
InstaWP Connect < 0.1.0.9 - Cross-Site Request Forgery via create_file_db_manager
Fixed in
Fixed in 0.1.0.9
CVSS
4.3 (medium)
Published
2023-07-26
Title
InstaWP Connect < 0.0.9.19 - Unauthenticated Data Modification
Fixed in
Fixed in 0.0.9.19
CVSS
9.8 (critical)