WordPress plugin
Instantio — Side Cart & One-Page Checkout for WooCommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium2
- Low0
All Instantio — Side Cart & One-Page Checkout for WooCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Unauthenticated Information Exposure ≤3.3.30Update to 3.3.31 | CVE-2026-39571 | |
| High7.2 | Authenticated (Admin+) Arbitrary File Upload ≤3.3.16Update to 3.3.17 | CVE-2025-47550 | |
| Medium5.3 | Missing Authorization to Unauthenticated Settings Update ≤3.3.7Update to 3.3.8 | CVE-2025-24581 | |
| High8.8 | Cross Site Request Forgery ≤1.2.5Update to 1.2.6 | — |
- Medium5.3Unauthenticated Information Exposure
≤3.3.30Update to 3.3.31
- High7.2Authenticated (Admin+) Arbitrary File Upload
≤3.3.16Update to 3.3.17
- Medium5.3Missing Authorization to Unauthenticated Settings Update
≤3.3.7Update to 3.3.8
- High8.8Cross Site Request Forgery
≤1.2.5Update to 1.2.6
Instantio — Side Cart & One-Page Checkout for WooCommerce: common questions
Does Instantio — Side Cart & One-Page Checkout for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Instantio — Side Cart & One-Page Checkout for WooCommerce: 2 high, 2 medium. None are known to affect version null.
How do I check which version of Instantio — Side Cart & One-Page Checkout for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Instantio — Side Cart & One-Page Checkout for WooCommerce vulnerability?
CVE-2026-39571, published Mar 25, 2026: Instantio <= 3.3.30 - Unauthenticated Information Exposure. Severity: Medium (CVSS 5.3).
Is any Instantio — Side Cart & One-Page Checkout for WooCommerce vulnerability listed in CISA KEV?
No. None of the known Instantio — Side Cart & One-Page Checkout for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.