Skip to content
Threat Feed
Subscribe

Vendor

InstaWP

1 brief RSS
high advisory

CVE-2026-13457: Remote Code Execution in InstaWP Connect Plugin

The InstaWP Connect WordPress plugin (<= 0.1.3.6) is vulnerable to remote code execution due to insecure configuration file storage and missing access controls on Apache servers with directory listing enabled.

InstaWP Connect wordpress plugin rce apache
2t 1c