Instapage Plugin
Instapage Plugin has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 2 are fixed as of October 2026. Their average CVSS score is 5.8, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Server-Side Request Forgery (SSRF).
Every one of the 2 issues recorded for Instapage Plugin has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Instapage Plugin is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.10.
CVE-2026-39728Instapage Plugin <= 3.7.2 - Unauthenticated Server-Side Request Forgery
Read the full analysisVulnerability Records

Instapage Plugin
Author
instapagedev
Join the thousands of users who have downloaded the Instapage plugin for WordPress to seamlessly publish landing pages as a natural extension of your WordPress blog or website. All you have to do is select the ‘Push to WordPress’ publishing option within Instapage when you’re finished with your landing page. (Click the “Installation” tab for detailed upload instructions) Instapage is the most powerful landing page platform on the market. Ideal for teams and agencies, Instapage has everything you need to build fully customizable, on-brand landing pages. Instapage is the only platform that offers unlimited domains. No other landing page builder offers this level of precision with full design freedom Every promotion deserves a great page. One that you’re confident is pixel perfect, exquisitely composed, professional and polished, whether it’s in desktop or mobile form. Our fully customizable builder is intuitive and powerful, so it’s easy to create on-brand, conversion-friendly landing pages Design without bounds by selecting from over 5,000 fonts and 33,000,000 images to work with. And, our new alignment, distribution and grouping features, ensure your work is perfect in desktop or mobile versions. Over 100+ Landing Page Templates to Get You Started Save valuable time and money with our integrations Integrate with the most widely used marketing services, like Salesforce, Zapier, Drupal, Autopilot, MailChimp, Google Analytics, AWeber, GoToWebinar, to name just a few. Highest ranked support in the industry Join 250,000+ businesses who rely on Instapage.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C