Skip to content
OpenAdvisories

Vendor

niteo

5 known vulnerabilities.

Products

CMP – Coming Soon & Maintenance Plugin by NiteoThemes 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2026-12470

    CMP <= 4.1.17 - Authenticated (Editor+) Privilege Escalation via Arbitrary Option Update to cmp_ajax_import_settings AJAX Action

    The CMP – Coming Soon & Maintenance Plugin by NiteoThemes plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'cmp_ajax_import_settings' AJAX action in all vers…

    niteo CMP – Coming Soon & Maintenance Plugin by NiteoThemes Web / CMS
  • High 8.8
    CVE-2026-6518

    CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.16 - Missing Authorization to Authenticated (Administrator+) Arbitrary File Upload and Remote Code Execution

    The CMP – Coming Soon & Maintenance Plugin by NiteoThemes plugin for WordPress is vulnerable to arbitrary file upload and remote code execution in all versions up to, and including, 4.1.16 via the `cmp_theme_update_install` AJAX action. This is due to the fun…

    niteo CMP – Coming Soon & Maintenance Plugin by NiteoThemes Web / CMS
  • High 8.3
    CVE-2020-36730 Public exploit

    CMP <= 3.8.1 - Missing Authorization

    The CMP for WordPress is vulnerable to authorization bypass due to a missing capability check on the cmp_get_post_detail(), niteo_export_csv(), and cmp_disable_comingsoon_ajax() functions in versions up to, and including, 3.8.1. This makes it possible for una…

    niteo CMP – Coming Soon & Maintenance Plugin by NiteoThemes