WordPress plugin
CMP – Coming Soon & Maintenance Plugin by NiteoThemes security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 13 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High4
- Medium9
- Low0
All CMP – Coming Soon & Maintenance Plugin by NiteoThemes vulnerabilities
- Medium5.34.1.20 - Missing Authorization to Unauthenticated Maintenance Mode Bypass
4.1.19 – 4.1.20Update to 4.1.21
- Medium5.3Coming Soon & Maintenance <= 4.1.19 - Unauthenticated Maintenance Mode Bypass
≤4.1.19Update to 4.1.20
- High7.2Authenticated (Editor+) Privilege Escalation via Arbitrary Option Update to cmp_ajax_import_settings AJAX Action
≤4.1.17Update to 4.1.18
- Medium4.7Authenticated (Editor+) Privilege Escalation
<4.1.18Update to 4.1.18
- Medium5.3Missing Authorization to Unauthenticated Settings Change
<4.1.18Update to 4.1.18
- Medium4.4Authenticated (Editor+) Stored Cross-Site Scripting
<4.1.18Update to 4.1.18
- High8.8Missing Authorization to Authenticated (Administrator+) Arbitrary File Upload and Remote Code Execution
≤4.1.16Update to 4.1.17
- High7.2Authenticated (Admin+) Arbitrary File Upload
≤4.1.13Update to 4.1.15
- Medium5.5Authenticated (Admin+) Server-Side Request Forgery
≤4.1.10Update to 4.1.11
- Medium5.3Maintenance Mode Bypass
≤4.1.7Update to 4.1.8
- Medium5.3Information Exposure
≤4.1.6Update to 4.1.7
- Medium5.3Coming Soon & Maintenance Plugin <= 4.0.18 - Unauthenticated Arbitrary CSS Update
<4.0.19Update to 4.0.19
- High8.3Missing Authorization
≤3.8.1Update to 3.8.2
CMP – Coming Soon & Maintenance Plugin by NiteoThemes: common questions
Does CMP – Coming Soon & Maintenance Plugin by NiteoThemes have known vulnerabilities?
Yes. VulnCrest Radar lists 13 known vulnerabilities in CMP – Coming Soon & Maintenance Plugin by NiteoThemes: 4 high, 9 medium. None are known to affect version null.
How do I check which version of CMP – Coming Soon & Maintenance Plugin by NiteoThemes I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent CMP – Coming Soon & Maintenance Plugin by NiteoThemes vulnerability?
CVE-2026-101138, published Oct 21, 2026: CMP – Coming Soon & Maintenance Plugin by NiteoThemes 4.1.19 - 4.1.20 - Missing Authorization to Unauthenticated Maintenance Mode Bypass. Severity: Medium (CVSS 5.3).
Is any CMP – Coming Soon & Maintenance Plugin by NiteoThemes vulnerability listed in CISA KEV?
No. None of the known CMP – Coming Soon & Maintenance Plugin by NiteoThemes vulnerabilities is currently listed in the CISA KEV catalog.