CVE-2026-109400

The InstaWP Connect WordPress plugin (versions ©= 0.1.4.1 ) is vulnerable to Privilege Escalation due to improper privilege management and API Key Disclosure . The plugin incorrectly uses a role name as a capability in add_management_page(), and generate_section_field() renders the master API key...