Vulnerabilities > Niteothemes > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-06-09 CVE-2023-2159 Unspecified vulnerability in Niteothemes CMP
The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Maintenance Mode Bypass in versions up to, and including, 4.1.7.
network
low complexity
niteothemes
5.3
2023-03-07 CVE-2023-1263 Information Exposure vulnerability in Niteothemes Coming Soon & Maintenance
The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 4.1.6 via the cmp_get_post_detail function.
network
low complexity
niteothemes CWE-200
5.3
2022-02-14 CVE-2022-0188 Missing Authentication for Critical Function vulnerability in Niteothemes CMP
The CMP WordPress plugin before 4.0.19 allows any user, even not logged in, to arbitrarily change the coming soon page layout.
network
low complexity
niteothemes CWE-306
5.3