All 5 CVE vulnerabilities found in CMP – Coming Soon & Maintenance Plugin by NiteoThemes, with AI-generated Chinese analysis, references, and POCs.
Vendor: niteo
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-12470 | CMP <= 4.1.17 - Authenticated (Editor+) Privilege Escalation via Arbitrary Option Update to cmp_ajax_import_settings AJAX Action CWE-269 | 7.2 | High | 2026-09-22 |
| CVE-2026-6518 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.16 - Missing Authorization to Authenticated (Administrator+) Arbitrary File Upload and Remote Code Execution CWE-434 | 8.8 | High | 2026-04-18 |
| CVE-2023-2159 | CMP – Coming Soon & Maintenance <= 4.1.7 - Maintenance Mode Bypass CWE-284 | 5.3 | Medium | 2023-06-09 |
| CVE-2020-36730 | CMP <= 3.8.1 - Missing Authorization CWE-862 | 8.3 | High | 2023-06-07 |
| CVE-2023-1263 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.6 - Information Exposure CWE-200 | 5.3 | Medium | 2023-03-07 |
All 5 known CVE vulnerabilities affecting CMP – Coming Soon & Maintenance Plugin by NiteoThemes with full Chinese analysis, references, and POCs where available.