Unpatched CSRF and SSRF flaws in Instapage plugin
Known CSRF and SSRF security flaws in the plugin stay unpatched, with no clear guidance for sites that already run it.
Tier II · Emerging Problems that are still building up.
3 public reports · first reported 29 September 2025 · last reported 9 October 2026
What's going wrong
Site owners running the Instapage WordPress plugin report publicly tracked security flaws, including a server-side request forgery issue and cross-site request forgery problems in older releases.
AI-assisted: written with the help of AI from the reports. The idea report has the full summary.
In the idea report
- The full summary.
- The products the 3 reports are about, and how many came each month.
- Related problems.
No business has been found with this problem yet, so the report has no contacts. All sales are final — no refunds. Pricing.