CVE-2026-114743

The InstaWP Connect WordPress plugin before version 0.1.4.2 is vulnerable to an authenticated settings update due to a missing capability check on the settings update action. While the plugin verifies a nonce , it fails to validate user permissions, allowing an authenticated user with a low-privi...