CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-2667

The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation in the /wp-json/instawp-connect/v1/config REST API endpoint in all versions up to, and including, 0.1.0.22. This makes it possible for unauthenticated attackers to upload arbitrary files.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.865

EPSS Ranking 99.4%

CVSS Severity

CVSS v3 Score 9.8

References

Products affected by CVE-2024-2667

Instawp » Instawp Connect » Version: N/A

cpe:2.3:a:instawp:instawp_connect:-
Instawp » Instawp Connect » Version: 0.0.1

cpe:2.3:a:instawp:instawp_connect:0.0.1
Instawp » Instawp Connect » Version: 0.0.7

cpe:2.3:a:instawp:instawp_connect:0.0.7
Instawp » Instawp Connect » Version: 0.0.9.10

cpe:2.3:a:instawp:instawp_connect:0.0.9.10
Instawp » Instawp Connect » Version: 0.0.9.11

cpe:2.3:a:instawp:instawp_connect:0.0.9.11
Instawp » Instawp Connect » Version: 0.0.9.12

cpe:2.3:a:instawp:instawp_connect:0.0.9.12
Instawp » Instawp Connect » Version: 0.0.9.13

cpe:2.3:a:instawp:instawp_connect:0.0.9.13
Instawp » Instawp Connect » Version: 0.0.9.14

cpe:2.3:a:instawp:instawp_connect:0.0.9.14
Instawp » Instawp Connect » Version: 0.0.9.15

cpe:2.3:a:instawp:instawp_connect:0.0.9.15
Instawp » Instawp Connect » Version: 0.0.9.16

cpe:2.3:a:instawp:instawp_connect:0.0.9.16
Instawp » Instawp Connect » Version: 0.0.9.17

cpe:2.3:a:instawp:instawp_connect:0.0.9.17
Instawp » Instawp Connect » Version: 0.0.9.18

cpe:2.3:a:instawp:instawp_connect:0.0.9.18
Instawp » Instawp Connect » Version: 0.0.9.19

cpe:2.3:a:instawp:instawp_connect:0.0.9.19
Instawp » Instawp Connect » Version: 0.0.9.20

cpe:2.3:a:instawp:instawp_connect:0.0.9.20
Instawp » Instawp Connect » Version: 0.0.9.21

cpe:2.3:a:instawp:instawp_connect:0.0.9.21
Instawp » Instawp Connect » Version: 0.0.9.22

cpe:2.3:a:instawp:instawp_connect:0.0.9.22
Instawp » Instawp Connect » Version: 0.0.9.23

cpe:2.3:a:instawp:instawp_connect:0.0.9.23
Instawp » Instawp Connect » Version: 0.0.9.24

cpe:2.3:a:instawp:instawp_connect:0.0.9.24
Instawp » Instawp Connect » Version: 0.0.9.25

cpe:2.3:a:instawp:instawp_connect:0.0.9.25
Instawp » Instawp Connect » Version: 0.0.9.26

cpe:2.3:a:instawp:instawp_connect:0.0.9.26
Instawp » Instawp Connect » Version: 0.0.9.27

cpe:2.3:a:instawp:instawp_connect:0.0.9.27
Instawp » Instawp Connect » Version: 0.0.9.28

cpe:2.3:a:instawp:instawp_connect:0.0.9.28
Instawp » Instawp Connect » Version: 0.0.9.29

cpe:2.3:a:instawp:instawp_connect:0.0.9.29
Instawp » Instawp Connect » Version: 0.0.9.3

cpe:2.3:a:instawp:instawp_connect:0.0.9.3
Instawp » Instawp Connect » Version: 0.0.9.30

cpe:2.3:a:instawp:instawp_connect:0.0.9.30
Instawp » Instawp Connect » Version: 0.0.9.31

cpe:2.3:a:instawp:instawp_connect:0.0.9.31
Instawp » Instawp Connect » Version: 0.0.9.32

cpe:2.3:a:instawp:instawp_connect:0.0.9.32
Instawp » Instawp Connect » Version: 0.0.9.33

cpe:2.3:a:instawp:instawp_connect:0.0.9.33
Instawp » Instawp Connect » Version: 0.0.9.40

cpe:2.3:a:instawp:instawp_connect:0.0.9.40
Instawp » Instawp Connect » Version: 0.0.9.41

cpe:2.3:a:instawp:instawp_connect:0.0.9.41
Instawp » Instawp Connect » Version: 0.0.9.42

cpe:2.3:a:instawp:instawp_connect:0.0.9.42
Instawp » Instawp Connect » Version: 0.0.9.43

cpe:2.3:a:instawp:instawp_connect:0.0.9.43
Instawp » Instawp Connect » Version: 0.0.9.44

cpe:2.3:a:instawp:instawp_connect:0.0.9.44
Instawp » Instawp Connect » Version: 0.0.9.45

cpe:2.3:a:instawp:instawp_connect:0.0.9.45
Instawp » Instawp Connect » Version: 0.0.9.46

cpe:2.3:a:instawp:instawp_connect:0.0.9.46
Instawp » Instawp Connect » Version: 0.0.9.47

cpe:2.3:a:instawp:instawp_connect:0.0.9.47
Instawp » Instawp Connect » Version: 0.0.9.48

cpe:2.3:a:instawp:instawp_connect:0.0.9.48
Instawp » Instawp Connect » Version: 0.0.9.49

cpe:2.3:a:instawp:instawp_connect:0.0.9.49
Instawp » Instawp Connect » Version: 0.0.9.50

cpe:2.3:a:instawp:instawp_connect:0.0.9.50
Instawp » Instawp Connect » Version: 0.0.9.51

cpe:2.3:a:instawp:instawp_connect:0.0.9.51
Instawp » Instawp Connect » Version: 0.0.9.6

cpe:2.3:a:instawp:instawp_connect:0.0.9.6
Instawp » Instawp Connect » Version: 0.0.9.7

cpe:2.3:a:instawp:instawp_connect:0.0.9.7
Instawp » Instawp Connect » Version: 0.0.9.8

cpe:2.3:a:instawp:instawp_connect:0.0.9.8
Instawp » Instawp Connect » Version: 0.0.9.9

cpe:2.3:a:instawp:instawp_connect:0.0.9.9
Instawp » Instawp Connect » Version: 0.1.0.0

cpe:2.3:a:instawp:instawp_connect:0.1.0.0
Instawp » Instawp Connect » Version: 0.1.0.1

cpe:2.3:a:instawp:instawp_connect:0.1.0.1
Instawp » Instawp Connect » Version: 0.1.0.10

cpe:2.3:a:instawp:instawp_connect:0.1.0.10
Instawp » Instawp Connect » Version: 0.1.0.11

cpe:2.3:a:instawp:instawp_connect:0.1.0.11
Instawp » Instawp Connect » Version: 0.1.0.12

cpe:2.3:a:instawp:instawp_connect:0.1.0.12
Instawp » Instawp Connect » Version: 0.1.0.13

cpe:2.3:a:instawp:instawp_connect:0.1.0.13
Instawp » Instawp Connect » Version: 0.1.0.14

cpe:2.3:a:instawp:instawp_connect:0.1.0.14
Instawp » Instawp Connect » Version: 0.1.0.15

cpe:2.3:a:instawp:instawp_connect:0.1.0.15
Instawp » Instawp Connect » Version: 0.1.0.16

cpe:2.3:a:instawp:instawp_connect:0.1.0.16
Instawp » Instawp Connect » Version: 0.1.0.17

cpe:2.3:a:instawp:instawp_connect:0.1.0.17
Instawp » Instawp Connect » Version: 0.1.0.18

cpe:2.3:a:instawp:instawp_connect:0.1.0.18
Instawp » Instawp Connect » Version: 0.1.0.19

cpe:2.3:a:instawp:instawp_connect:0.1.0.19
Instawp » Instawp Connect » Version: 0.1.0.2

cpe:2.3:a:instawp:instawp_connect:0.1.0.2
Instawp » Instawp Connect » Version: 0.1.0.20

cpe:2.3:a:instawp:instawp_connect:0.1.0.20
Instawp » Instawp Connect » Version: 0.1.0.21

cpe:2.3:a:instawp:instawp_connect:0.1.0.21
Instawp » Instawp Connect » Version: 0.1.0.22

cpe:2.3:a:instawp:instawp_connect:0.1.0.22
Instawp » Instawp Connect » Version: 0.1.0.3

cpe:2.3:a:instawp:instawp_connect:0.1.0.3
Instawp » Instawp Connect » Version: 0.1.0.4

cpe:2.3:a:instawp:instawp_connect:0.1.0.4
Instawp » Instawp Connect » Version: 0.1.0.5

cpe:2.3:a:instawp:instawp_connect:0.1.0.5
Instawp » Instawp Connect » Version: 0.1.0.6

cpe:2.3:a:instawp:instawp_connect:0.1.0.6
Instawp » Instawp Connect » Version: 0.1.0.7

cpe:2.3:a:instawp:instawp_connect:0.1.0.7
Instawp » Instawp Connect » Version: 0.1.0.8

cpe:2.3:a:instawp:instawp_connect:0.1.0.8
Instawp » Instawp Connect » Version: 0.1.0.9

cpe:2.3:a:instawp:instawp_connect:0.1.0.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-2667

Products

Pricing

Contact Us