WordPress plugin
CMP – Coming Soon & Maintenance Plugin by NiteoThemes security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 13 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High4
- Medium9
- Low0
All CMP – Coming Soon & Maintenance Plugin by NiteoThemes vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Authenticated (Editor+) Privilege Escalation via Arbitrary Option Update to cmp_ajax_import_settings AJAX Action ≤4.1.17Update to 4.1.18 | CVE-2026-12470 | |
| High8.8 | Missing Authorization to Authenticated (Administrator+) Arbitrary File Upload and Remote Code Execution ≤4.1.16Update to 4.1.17 | CVE-2026-6518 | |
| High7.2 | Authenticated (Admin+) Arbitrary File Upload ≤4.1.13Update to 4.1.15 | CVE-2025-32118 | |
| High8.3 | Missing Authorization ≤3.8.1Update to 3.8.2 | CVE-2020-36730 |
- High7.2Authenticated (Editor+) Privilege Escalation via Arbitrary Option Update to cmp_ajax_import_settings AJAX Action
≤4.1.17Update to 4.1.18
- High8.8Missing Authorization to Authenticated (Administrator+) Arbitrary File Upload and Remote Code Execution
≤4.1.16Update to 4.1.17
- High7.2Authenticated (Admin+) Arbitrary File Upload
≤4.1.13Update to 4.1.15
- High8.3Missing Authorization
≤3.8.1Update to 3.8.2
CMP – Coming Soon & Maintenance Plugin by NiteoThemes: common questions
Does CMP – Coming Soon & Maintenance Plugin by NiteoThemes have known vulnerabilities?
Yes. VulnCrest Radar lists 13 known vulnerabilities in CMP – Coming Soon & Maintenance Plugin by NiteoThemes: 4 high, 9 medium. None are known to affect version null.
How do I check which version of CMP – Coming Soon & Maintenance Plugin by NiteoThemes I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent CMP – Coming Soon & Maintenance Plugin by NiteoThemes vulnerability?
CVE-2026-101138, published Oct 21, 2026: CMP – Coming Soon & Maintenance Plugin by NiteoThemes 4.1.19 - 4.1.20 - Missing Authorization to Unauthenticated Maintenance Mode Bypass. Severity: Medium (CVSS 5.3).
Is any CMP – Coming Soon & Maintenance Plugin by NiteoThemes vulnerability listed in CISA KEV?
No. None of the known CMP – Coming Soon & Maintenance Plugin by NiteoThemes vulnerabilities is currently listed in the CISA KEV catalog.