Vulnerabilities

TI-2024-05939 CVE-2024-6397 · GHSA-rqgq-6m99-363c

InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to Admin

MEDIUM 50

The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 0.1.0.44.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.007 Published 2024-07-11 No fix listed CWE-288

TI-2024-24743 CVE-2024-37228 · GHSA-6c3m-wjj2-885p

WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability

MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.38.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00527 Published 2024-06-24 No fix listed CWE-434

TI-2024-04554 CVE-2024-4898 · GHSA-9qw6-wc53-f6x9

Missing authorization in InstaWP Connect – 1-click WP Staging & Migration

MEDIUM 56

The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to arbitrary option updates due to a missing authorization checks on the REST API calls in all versions up to, and including, 0.1.0.…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0419 Published 2024-06-12 No fix listed CWE-862

TI-2024-21581 CVE-2024-32701 · GHSA-j5gm-6c93-hcw4

WordPress InstaWP Connect plugin <= 0.1.0.24 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.24.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00333 Published 2024-06-09 No fix listed CWE-862

TI-2024-14746 CVE-2024-22145 · GHSA-8w8v-r4xj-j99j

WordPress InstaWP Connect plugin <= 0.1.0.8 - Arbitrary Option Update to Privilege Escalation vulnerability

MEDIUM 42

Incorrect Privilege Assignment vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.8.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01103 Published 2024-05-17 No fix listed CWE-266

TI-2024-02482 CVE-2024-2667 · GHSA-5qjg-g4mj-x7h7

InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload

MEDIUM 51

The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation in the /wp-json/instawp-connect/v1/config REST API endpoint in all ver…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05747 Published 2024-05-02 No fix listed CWE-434

TI-2024-17018 CVE-2024-25918 · GHSA-cmmv-w3j8-5hm4

WordPress InstaWP Connect plugin <= 0.1.0.8 - Remote Code Execution vulnerability

MEDIUM 44

Improper Control of Generation of Code ('Code Injection') vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.8.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00675 Published 2024-04-03 No fix listed CWE-94

TI-2024-15549 CVE-2024-23507 · GHSA-jgqm-9prw-2qr6

WordPress InstaWP Connect plugin <= 0.1.0.9 - SQL Injection vulnerability

MEDIUM 41

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.9.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00621 Published 2024-01-31 No fix listed CWE-89

TI-2024-15548 CVE-2024-23506 · GHSA-2fpf-9qrw-vj6r

WordPress InstaWP Connect plugin <= 0.1.0.9 - Sensitive Data Exposure vulnerability

LOW 34

Insertion of Sensitive Information Into Sent Data vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.9.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00504 Published 2024-01-26 No fix listed CWE-201

TI-2023-03675 CVE-2023-3956 · GHSA-84qr-g4jc-2m5f

Missing authorization in InstaWP Connect – 1-click WP Staging & Migration

MEDIUM 51

The InstaWP Connect plugin for WordPress is vulnerable to unauthorized access of data, modification of data and loss of data due to a missing capability check on the 'events_receiver' function in versions up to, and incl…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00966 Published 2023-07-27 No fix listed CWE-862

Vulnerabilities

Filters