CVE-2026-116399

Name of the Vulnerable Software and Affected Versions InstaWP Connect versions prior to 0.1.4.3

Description Cross-Site Request Forgery (CSRF) occurs when an unauthenticated attacker tricks a site administrator into clicking a link, allowing the attacker to perform unauthorized actions via a forged request. This is caused by missing or incorrect nonce validation (a unique token used to prevent request forgery) on a function.

Recommendations Update to a version newer than 0.1.4.2.