Instapagedev vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Instapagedev products: 2 record(s), with severity, exploitation and fixes.

Instapage Plugin 2

Exploited only (KEV) →

CVE-2026-39728 High · 7.2 CWE-918 Oct 6, 2026

WordPress Instapage Plugin plugin <= 3.7.2 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin <= 3.7.2 versions.

CVE-2025-60115 Medium · 4.3 CWE-352 Sep 26, 2025

WordPress Instapage plugin plugin <= 3.7.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in instapagedev Instapage Plugin instapage allows Cross Site Request Forgery.This issue affects Instapage Plugin: from n/a through <= 3.7.0.