Skip to content
Threat Feed
Subscribe

Vendor

InstaWP

3 briefs RSS
high advisory

InstaWP Connect: Cross-Site Request Forgery (CVE-2026-116399)

InstaWP Connect versions n/a through 0.1.4.2 are affected by a Cross-Site Request Forgery (CSRF) vulnerability.

InstaWP Connect
1c
high advisory

Privilege Escalation in InstaWP Connect WordPress Plugin

The InstaWP Connect plugin for WordPress, versions 0.1.4.1 and earlier, contains a privilege escalation vulnerability allowing authenticated users to extract the master API key and mint administrator session tokens.

InstaWP Connect wordpress privilege-escalation web-application cve-2026-109400
2t 1c
high advisory

CVE-2026-13457: Remote Code Execution in InstaWP Connect Plugin

The InstaWP Connect WordPress plugin (<= 0.1.3.6) is vulnerable to remote code execution due to insecure configuration file storage and missing access controls on Apache servers with directory listing enabled.

InstaWP Connect wordpress plugin rce apache
2t 1c