Tag

Cve-2026-109400

1 brief RSS

Privilege Escalation in InstaWP Connect WordPress Plugin

The InstaWP Connect plugin for WordPress, versions 0.1.4.1 and earlier, contains a privilege escalation vulnerability allowing authenticated users to extract the master API key and mint administrator session tokens.

InstaWP Connect wordpress privilege-escalation web-application cve-2026-109400

2t 1c 1h ago