Cross-Site Request Forgery Vulnerability in InstaWP Connect by InstaWP

CVE-2026-116399

What is CVE-2026-116399?

A Cross-Site Request Forgery (CSRF) vulnerability exists in InstaWP Connect, enabling attackers to execute unauthorized actions on behalf of users without their consent. This can lead to potential security breaches, where malicious entities can exploit this loophole to manipulate user sessions and perform actions that could compromise sensitive information. Users of affected versions should take immediate steps to update to secure releases to mitigate risks associated with this flaw.

References