CMP – Coming Soon & Maintenance Plugin by NiteoThemes vulnerabilities

2 known vulnerabilities in CMP – Coming Soon & Maintenance Plugin by NiteoThemes from Niteo. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  CMP – Coming Soon & Maintenance Plugin by…: Improper Privilege Management

  CVE-2026-12470Sep 22, 2026Niteo

  The CMP – Coming Soon & Maintenance Plugin by NiteoThemes plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'cmp_ajax_import_settings' AJAX action in all versi

• 8.8 High severity

  CMP – Coming Soon & Maintenance Plugin by…: Unrestricted Upload of File with Dangerous Type

  CVE-2026-6518Apr 18, 2026Niteo

  The CMP – Coming Soon & Maintenance Plugin by NiteoThemes plugin for WordPress is vulnerable to arbitrary file upload and remote code execution in all versions up to, and including, 4.1.16 via the `cmp_theme_update_install` AJAX action. This is due to the func