Advisories · Technology

CMP – Coming Soon & Maintenance Plugin by NiteoThemes.

Every CVE that names CMP – Coming Soon & Maintenance Plugin by NiteoThemes among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-12470 CVE record

CVSS 7.2 High

CMP <= 4.1.17 - Authenticated (Editor+) Privilege Escalation via Arbitrary Option Update to cmp_ajax_import_settings AJAX Action
- CMP – Coming Soon & Maintenance Plugin by NiteoThemes
- Privilege escalation
Not analysed yet 22 Sept 2026
CVE-2026-6518 CVE record

CVSS 8.8 High

CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.16 - Missing Authorization to Authenticated (Administrator+) Arbitrary File Upload and Remote Code Execution
- CMP – Coming Soon & Maintenance Plugin by NiteoThemes
- Unrestricted file upload
Not analysed yet 18 Apr 2026
CVE-2023-2159 CVE record

CVSS 5.3 Medium

CMP – Coming Soon & Maintenance <= 4.1.7 - Maintenance Mode Bypass
- CMP – Coming Soon & Maintenance Plugin by NiteoThemes
- Broken access control
Not analysed yet 9 Jun 2023
CVE-2020-36730 CVE record

CVSS 8.3 High

CMP <= 3.8.1 - Missing Authorization
- CMP – Coming Soon & Maintenance Plugin by NiteoThemes
- Broken access control
Not analysed yet 7 Jun 2023
CVE-2023-1263 CVE record

CVSS 5.3 Medium

CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.6 - Information Exposure
- CMP – Coming Soon & Maintenance Plugin by NiteoThemes
- Information disclosure
Not analysed yet 7 Mar 2023