Instawp Connect
Approved changes feed: RSS · Atom
cpe:2.3:a:instawp:instawp_connect:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Instawp (03e78fb4-336f-5959-8c23-70627107e6db) |
|---|---|
| Product | Instawp Connect (da128d43-67af-5c60-837b-937c9075bea8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/instawp/instawp-connect |
purl2cpe | 2026-06-01 10:13:20.624321 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6397 |
vulnerable | 2026-06-08 06:58:19.336932 |
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to Admin
CRITICAL (9.8)
The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 0.1.0.44. This is due to insufficient verification of the API key. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username, and to perform a variety of other administrative tasks. NOTE: This vulnerability was partially fixed in 0.1.0.44, but was still exploitable via Cross-Site Request Forgery.
Published: 2024-07-11T03:33:19.573Z
Updated: 2026-04-08T17:10:12.110Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4898 |
vulnerable | 2026-06-08 06:50:18.989769 |
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation
CRITICAL (9.8)
The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to arbitrary option updates due to a missing authorization checks on the REST API calls in all versions up to, and including, 0.1.0.38. This makes it possible for unauthenticated attackers to connect the site to InstaWP API, edit arbitrary site options and create administrator accounts.
Published: 2024-06-12T11:05:07.625Z
Updated: 2026-04-08T17:09:29.385Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37228 |
vulnerable | 2026-06-08 06:39:46.921228 |
WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability
CRITICAL (10)
Unrestricted Upload of File with Dangerous Type vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.38.
Published: 2024-06-24T12:35:18.966Z
Updated: 2026-04-28T16:09:56.955Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32701 |
vulnerable | 2026-06-08 06:37:23.669714 |
WordPress InstaWP Connect plugin <= 0.1.0.24 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.24.
Published: 2024-06-09T17:19:20.839Z
Updated: 2026-04-28T16:09:39.198Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2667 |
vulnerable | 2026-06-08 06:33:31.861869 |
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload
CRITICAL (9.8)
The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation in the /wp-json/instawp-connect/v1/config REST API endpoint in all versions up to, and including, 0.1.0.22. This makes it possible for unauthenticated attackers to upload arbitrary files.
Published: 2024-05-02T16:52:52.798Z
Updated: 2026-04-08T17:33:36.379Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25918 |
vulnerable | 2026-06-08 06:31:23.993984 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23507 |
vulnerable | 2026-06-08 06:29:39.847713 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23506 |
vulnerable | 2026-06-08 06:29:39.842020 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22145 |
vulnerable | 2026-06-08 06:29:33.930655 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3956 |
vulnerable | 2026-06-08 06:09:40.879488 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.