High severity8.8NVD Advisory· Published Oct 29, 2026

CVE-2026-116399

Description

Cross-Site Request Forgery (CSRF) vulnerability in InstaWP InstaWP Connect instawp-connect allows Cross Site Request Forgery.This issue affects InstaWP Connect: from n/a through 0.1.4.2.

Patches

Vulnerability mechanics

References

patchstack.com/database/wordpress/plugin/instawp-connect/vulnerability/wordpress-instawp-connect-plugin-0-1-4-2-cross-site-request-forgery-csrf-vulnerabilitynvd

News mentions

No linked articles in our index yet.