Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-02
CMP - Coming Soon & Maintenance - Security Vulnerability (CVE-2026-13413)
The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.20 does not correctly restrict access to the site while maintenance/coming-soon mode is enabled, allowing unauthenticated visitors to bypass the coming-soon page and reach the otherwise hidden site, including hidden published pages, by shaping the request so it is mistaken for a login request.
PLUGIN
CMP - Coming Soon & Maintenance
CVE-2026-13413
Risk Score
Threat Entry
Updated 2026-09-22
Cmp Coming Soon Maintenance - Security Vulnerability (CVE-2026-12470)
The CMP – Coming Soon & Maintenance Plugin by NiteoThemes plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'cmp_ajax_import_settings' AJAX action in all versions up to, and including, 4.1.17. This makes it possible for authenticated attackers, with Editor-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to…
PLUGIN
Cmp Coming Soon Maintenance
CVE-2026-12470
Risk Score
Threat Entry
Updated 2026-06-17
Cmp Coming Soon Maintenance - Remote Code Execution (CVE-2026-6518)
The CMP – Coming Soon & Maintenance Plugin by NiteoThemes plugin for WordPress is vulnerable to arbitrary file upload and remote code execution in all versions up to, and including, 4.1.16 via the `cmp_theme_update_install` AJAX action. This is due to the function only checking for the `publish_pages` capability (available to Editors and above) instead of `manage_options` (Administrators only), combined with a lack of proper validation on the user-supplied file URL and no verification of the downloaded file's content before extraction. This makes it possible for authenticated attackers, with Administrator-level access…
PLUGIN
Cmp Coming Soon Maintenance
CVE-2026-6518
Risk Score
Threat Entry
Updated 2026-06-17
Cmp Coming Soon Maintenance - Arbitrary File Upload (CVE-2025-32118)
Unrestricted Upload of File with Dangerous Type vulnerability in NiteoThemes CMP – Coming Soon & Maintenance cmp-coming-soon-maintenance allows Using Malicious Files.This issue affects CMP – Coming Soon & Maintenance: from n/a through
PLUGIN
Cmp Coming Soon Maintenance
CVE-2025-32118
Risk Score
Threat Entry
Updated 2026-06-17
CMP - Coming Soon & Maintenance - Security Vulnerability (CVE-2023-2159)
The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Maintenance Mode Bypass in versions up to, and including, 4.1.7. A correct cmp_bypass GET parameter in the URL (equal to the md5-hashed home_url in the default setting) allows users to visit a site placed in maintenance mode thus bypassing the plugin's provided feature.
PLUGIN
CMP - Coming Soon & Maintenance
CVE-2023-2159
Risk Score
Threat Entry
Updated 2026-06-17
CMP - Coming Soon & Maintenance - Information Disclosure (CVE-2023-1263)
The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 4.1.6 via the cmp_get_post_detail function. This can allow unauthenticated individuals to obtain the contents of any non-password-protected, published post or page even when maintenance mode is enabled.
PLUGIN
CMP - Coming Soon & Maintenance
CVE-2023-1263
Risk Score
Threat Entry
Updated 2026-06-17
Cmp Coming Soon Maintenance - Security Vulnerability (CVE-2022-0188)
The CMP WordPress plugin before 4.0.19 allows any user, even not logged in, to arbitrarily change the coming soon page layout.
PLUGIN
Cmp Coming Soon Maintenance
CVE-2022-0188
Risk Score