CVE-2024-25918

Severity

CRITICAL

CVSS

9.9

EPSS

0.00681

Risk score

39.84

CISA KEV

PoC

Published

2024-04-03

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2024-23220, GHSA-CMMV-W3J8-5HM4

Products

instawp:InstaWP Connect 0 ≤0.1.0.8

Sources

euvd EUVD-2024-23220

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.8.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-23220
https://patchstack.com/database/Wordpress/Plugin/instawp-connect/vulnerability/wordpress-instawp-connect-plugin-0-1-0-8-remote-code-execution-vulnerability?_s_id=cve