InstaWP Connect – 1-click WP Staging & Migration

Vulnerabilities 17Slug instawp-connectLatest version 0.1.3.2WordPress.org →

Minimum safe version

0.1.2.7

Update to 0.1.2.7 or later to address 17 fixable vulnerabilities

Latest available0.1.3.2
Medium 5.4
2026-04-08< 0.1.2.7

CVE-2026-39504

Medium 6.5
2025-12-18< 0.1.2.0

CVE-2025-66068

Critical 9.8
2025-04-11< 0.1.0.86

InstaWP Connect <= 0.1.0.85 - Unauthenticated Local PHP File Inclusion

N/A
< 0.1.0.9

InstaWP Connect &lt; 0.1.0.9 - Cross-Site Request Forgery via create_file_db_manager

N/A
2024-01-12< 0.1.0.9

InstaWP Connect <= 0.1.0.8 - Cross-Site Request Forgery via create_file_db_manager