Approved changes feed: RSS · Atom

cpe:2.3:a:instawp:instawp_connect:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorInstawp (03e78fb4-336f-5959-8c23-70627107e6db)
ProductInstawp Connect (da128d43-67af-5c60-837b-937c9075bea8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/instawp/instawp-connect purl2cpe 2026-06-01 10:13:20.612189

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-39504 vulnerable 2026-06-08 08:01:16.604881 WordPress InstaWP Connect plugin <= 0.1.2.5 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InstaWP Connect: from n/a through <= 0.1.2.5.
Published: 2026-04-08T08:30:13.405Z
Updated: 2026-04-29T09:52:01.914Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66068 vulnerable 2026-06-08 07:39:21.189764 WordPress InstaWP Connect plugin <= 0.1.1.9 - Broken Access Control vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InstaWP Connect: from n/a through <= 0.1.1.9.
Published: 2025-12-18T07:22:17.312Z
Updated: 2026-04-28T16:14:15.712Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31387 vulnerable 2026-06-08 07:17:02.932170 WordPress InstaWP Connect plugin <= 0.1.0.82 - Local File Inclusion vulnerability
HIGH (7.5)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in InstaWP InstaWP Connect instawp-connect allows PHP Local File Inclusion.This issue affects InstaWP Connect: from n/a through <= 0.1.0.82.
Published: 2025-03-31T06:07:11.377Z
Updated: 2026-04-28T16:12:05.698Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37228 vulnerable 2026-06-08 06:39:46.922274 WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability
CRITICAL (10)
Unrestricted Upload of File with Dangerous Type vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.38.
Published: 2024-06-24T12:35:18.966Z
Updated: 2026-04-28T16:09:56.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32701 vulnerable 2026-06-08 06:37:23.668401 WordPress InstaWP Connect plugin <= 0.1.0.24 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.24.
Published: 2024-06-09T17:19:20.839Z
Updated: 2026-04-28T16:09:39.198Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25918 vulnerable 2026-06-08 06:31:23.995301 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23507 vulnerable 2026-06-08 06:29:39.842397 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23506 vulnerable 2026-06-08 06:29:39.841975 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22145 vulnerable 2026-06-08 06:29:33.931780 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.