Skip to content
PluginCanary

InstaWP Connect - 1-click WP Staging & Migration

by InstaWP · 40,000+ active installs · Checked 3 Nov 2026
Healthy5 Warnings

Healthy: vulnerability published 29 Oct 2026, fixed in 0.1.4.3.

83/ 100 Canary Score
Sub-scores for InstaWP Connect - 1-click WP Staging & Migration
Ownership100
Maintenance100
Security60
Support70
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 29 Oct 2026, fixed in 0.1.4.3. Update to version 0.1.4.3 or later.29 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 23 Oct 2026, fixed in 0.1.4.2. Update to version 0.1.4.2 or later.23 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 15 Oct 2026, fixed in 0.1.4.2. Update to version 0.1.4.2 or later.15 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 13 Aug 2026, fixed in 0.1.3.8. Update to version 0.1.3.8 or later.13 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 11 Aug 2026, fixed in 0.1.3.7. Update to version 0.1.3.7 or later.11 Aug 2026Evidence
  • InfoSEC-310 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master28 Oct 2022 to 28 Oct 2022, 1 commits
instawp4 Nov 2022 to 2 Nov 2026, 226 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
2 days ago
Releases, 24 months
65
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter for InstaWP Connect - 1-click WP Staging & Migration
Q1 202416
Q2 202421
Q3 202412
Q4 202417
Q1 202512
Q2 202511
Q3 20255
Q4 20255
Q1 20267
Q2 20266
Q3 20267
Q4 20263

Last release 2 Nov 2026. Tested with WordPress 7.1 (current).

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
29 Oct 2026InstaWP Connect – 1-click WP Staging & Migration <= 0.1.4.2 - Cross-Site Request Forgery4.3<= 0.1.4.20.1.4.30
23 Oct 2026InstaWP Connect <= 0.1.4.1 - Missing Authorization4.3<= 0.1.4.10.1.4.20
15 Oct 2026InstaWP Connect <= 0.1.4.1 - Authenticated (Subscriber+) Privilege Escalation via Role-as-Capability Admin Page and API Key Disclosure via 'instawp_sync_tab_roles' Role-as-Capability Setting7.5<= 0.1.4.10.1.4.20
13 Aug 2026InstaWP Connect – 1-click WP Staging & Migration <= 0.1.3.7 - Missing Authorization5.3<= 0.1.3.70.1.3.80
11 Aug 2026InstaWP Connect <= 0.1.3.6 - Unauthenticated Cryptographic Key Disclosure7.5<= 0.1.3.60.1.3.70
11 Mar 2026InstaWP Connect <= 0.1.2.5 - Missing Authorization4.3<= 0.1.2.50.1.2.70
12 Dec 2025InstaWP Connect <= 0.1.1.9 - Missing Authorization5.3<= 0.1.1.90.1.2.00
10 Apr 2025InstaWP Connect <= 0.1.0.85 - Unauthenticated Local PHP File Inclusion8.1<= 0.1.0.850.1.0.860
29 Mar 2025InstaWP Connect <= 0.1.0.82 - Unauthenticated Local File Inclusion9.8<= 0.1.0.820.1.0.830
13 Mar 2025InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.83 - Cross-Site Request Forgery to Local File Inclusion8.8<= 0.1.0.830.1.0.840
10 Jul 2024InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to Admin9.8<= 0.1.0.440.1.0.450
21 Jun 2024InstaWP Connect <= 0.1.0.38 - Unauthenticated Arbitrary File Upload10<= 0.1.0.380.1.0.390
11 Jun 2024InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation9.8<= 0.1.0.380.1.0.390
22 Apr 2024InstaWP Connect <= 0.1.0.24 - Missing Authorization4.3<= 0.1.0.240.1.0.250
12 Apr 2024InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload9.8<= 0.1.0.220.1.0.230
14 Feb 2024InstaWP Connect <= 0.1.0.8 - Authenticated (Subscriber+) Remote Code Execution8.8<= 0.1.0.80.1.0.90
24 Jan 2024InstaWP Connect <= 0.1.0.9 - Missing Authorization to Sensitive Information Dislcosure4.3<= 0.1.0.90.1.0.100
24 Jan 2024InstaWP Connect <= 0.1.0.9 - Authenticated (Subscriber+) SQL Injection8.8<= 0.1.0.90.1.0.100
17 Jan 2024InstaWP Connect <= 0.1.0.8 - Missing Authorization to Arbitrary Options Update8.8<= 0.1.0.80.1.0.90
12 Jan 2024InstaWP Connect <= 0.1.0.8 - Cross-Site Request Forgery via create_file_db_manager4.3<= 0.1.0.80.1.0.90
26 Jul 2023InstaWP Connect <= 0.0.9.18 - Missing Authorization to Unauthenticated Post/Taxonomy/User Add/Change/Delete, Customizer Setting Change, Plugin Installation/Activation/Deactication via events_receiver9.8<= 0.0.9.180.0.9.190

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for InstaWP Connect - 1-click WP Staging & Migration
Q4 20232.0
Q1 20245.0
Q2 20245.0
Q3 20245.0
Q4 20265.0

Average rating rose from 2.0 to 5.0 between Q4 2023 and Q4 2026.

Rating distribution
5 star10
4 star0
3 star1
2 star0
1 star1
Latest low reviews

Momentum

40,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for InstaWP Connect - 1-click WP Staging & Migration
4 May 20263,681
11 May 202653,195
18 May 202652,971
25 May 20267,725
1 Jun 20264,699
8 Jun 20264,747
15 Jun 202647,859
22 Jun 20268,378
29 Jun 202652,693
6 Jul 20266,512
13 Jul 20265,793
20 Jul 202650,571
27 Jul 20268,165
3 Aug 202651,522
10 Aug 202663,097
17 Aug 202615,689
24 Aug 20266,368
31 Aug 20268,682
7 Sep 20264,260
14 Sep 202670,682
21 Sep 202669,014
28 Sep 202666,717
5 Oct 20265,949
12 Oct 202664,327
19 Oct 20265,221
26 Oct 202666,682
2 Nov 202647,346

Weekly downloads over the last 4 weeks are 45% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version0.1.4.4
AuthorInstaWP
Added4 Nov 2022
Last updated2 Nov 2026
Active installs40,000+
Requires WordPress5.6
Tested up to7.1.4
Requires PHP7.0
CategorySite Administration & Utilities > Site Migration & Cloning
Tagsclone, backup, migrate, restore, staging

Other plugins by this author: String locator, InstaMigrate

Questions

Is InstaWP Connect - 1-click WP Staging & Migration still maintained?

InstaWP Connect - 1-click WP Staging & Migration was last updated on 2 Nov 2026. Its Canary status is Healthy.

Is InstaWP Connect - 1-click WP Staging & Migration safe?

InstaWP Connect - 1-click WP Staging & Migration has no open unpatched vulnerabilities on record. 10 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns InstaWP Connect - 1-click WP Staging & Migration?

The wordpress.org author is InstaWP. Recent committers: instawp, plugin-master. We have recorded no ownership change.

What can I use instead of InstaWP Connect - 1-click WP Staging & Migration?

We have no healthier plugin in the same category on record yet.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue