Advisories · Technology

CMP.

Every CVE that names CMP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-13416 CVE record

CVSS 3.5 Low

CMP - Coming Soon & Maintenance < 4.1.18 - Editor+ Stored XSS via niteoCS_socialmedia
- CMP
- Cross-site scripting (XSS)
Not analysed yet 27 Aug 2026
CVE-2026-13415 CVE record

CVSS 7.2 High

CMP - Coming Soon & Maintenance < 4.1.18 - Editor+ Privilege Escalation via cmp_ajax_import_settings
- CMP
- Privilege escalation
Not analysed yet 27 Aug 2026
CVE-2026-13414 CVE record

CVSS 4.8 Medium

CMP - Coming Soon & Maintenance < 4.1.18 - Unauthenticated Maintenance Mode Disable via cmp_disable_comingsoon_ajax
- CMP
- Broken access control
Not analysed yet 27 Aug 2026
CVE-2022-0188 CVE record

Coming Soon & Maintenance Plugin by NiteoThemes < 4.0.19 - Unauthenticated Arbitrary CSS Update
- CMP
Not analysed yet 14 Feb 2022