- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/11/2026, CMP – Coming Soon & Maintenance Plugin by NiteoThemes recorded 1 security vulnerability in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of CMP – Coming Soon & Maintenance Plugin by NiteoThemes and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-12470CMP <= 4.1.17 - Authenticated (Editor+) Privilege Escalation via Arbitrary Option Update to cmp_ajax_import_settings AJAX ActionCVE-2026-6518CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.16 - Missing Authorization to Authenticated (Administrator+) Arbitrary File Upload and Remote Code ExecutionCVE-2023-2159CMP – Coming Soon & Maintenance <= 4.1.7 - Maintenance Mode BypassCVE-2020-36730CMP <= 3.8.1 - Missing AuthorizationCVE-2023-1263CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.6 - Information Exposure| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-12470CMP <= 4.1.17 - Authenticated (Editor+) Privilege Escalation via Arbitrary Option Update to cmp_ajax_import_settings AJAX Action | Exploitation statusNot exploited | FixYes | Published09/22/2026 | SeverityHigh |
CVE-2026-6518CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.16 - Missing Authorization to Authenticated (Administrator+) Arbitrary File Upload and Remote Code Execution | Exploitation statusNot exploited | FixYes | Published04/18/2026 | SeverityHigh |
CVE-2023-2159CMP – Coming Soon & Maintenance <= 4.1.7 - Maintenance Mode Bypass | Exploitation statusNot exploited | FixYes | Published06/09/2023 | SeverityMedium |
CVE-2020-36730CMP <= 3.8.1 - Missing Authorization | Exploitation statusNot exploited | FixYes | Published06/07/2023 | SeverityHigh |
CVE-2023-1263CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.6 - Information Exposure | Exploitation statusNot exploited | FixYes | Published03/07/2023 | SeverityMedium |
5 Results | Page 1 of 1