instawp
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 17 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 6, 2022 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →InstaWP Connect < 0.1.4.2 - Authenticated Plugin Settings Update via instawp_update_settings
InstaWP Connect <= 0.1.4.1 - Authenticated (Subscriber+) Privilege Escalation via Role-as-Capability Admin Page and API Key Disclosure via 'instawp_sync_tab_roles' Role-as-Capability Setting
WordPress InstaWP Connect plugin <= 0.1.0.82 - Local File Inclusion vulnerability
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.83 - Cross-Site Request Forgery to Local File Inclusion
String Locator <= 2.6.6 - Unauthenticated PHP Object Injection
String Locator <= 2.6.5 - Reflected Cross-Site Scripting
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to Admin
WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation
WordPress InstaWP Connect plugin <= 0.1.0.24 - Broken Access Control vulnerability
Monitor instawp in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.