Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

InstaWP Connect – 1-click WP Staging & Migration — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in InstaWP Connect – 1-click WP Staging & Migration, with AI-generated Chinese analysis, references, and POCs.

Vendor: instawp

CVE IDTitleCVSSSeverityPublished
CVE-2025-2636 InstaWP Connect <= 0.1.0.85 - Unauthenticated Local PHP File Inclusion CWE-22 8.1 High2025-04-11
CVE-2024-13913 InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.83 - Cross-Site Request Forgery to Local File Inclusion CWE-352 8.8 High2025-03-14
CVE-2024-6397 InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to Admin CWE-288 9.8 Critical2024-07-11
CVE-2024-4898 InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation CWE-862 9.8 Critical2024-06-12
CVE-2024-2667 InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload CWE-434 9.8 Critical2024-05-02
CVE-2023-3956 InstaWP Connect <= 0.0.9.18 - Missing Authorization to Unauthenticated Post/Taxonomy/User Add/Change/Delete, Customizer Setting Change, Plugin Installation/Activation/Deactication via events_receiver CWE-862 9.8 Critical2023-07-27

All 6 known CVE vulnerabilities affecting InstaWP Connect – 1-click WP Staging & Migration with full Chinese analysis, references, and POCs where available.