Skip to content
OpenAdvisories

Vendor

niteo

5 known vulnerabilities.

Products

CMP – Coming Soon & Maintenance Plugin by NiteoThemes 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2020-36730 Public exploit

    CMP <= 3.8.1 - Missing Authorization

    The CMP for WordPress is vulnerable to authorization bypass due to a missing capability check on the cmp_get_post_detail(), niteo_export_csv(), and cmp_disable_comingsoon_ajax() functions in versions up to, and including, 3.8.1. This makes it possible for una…

    niteo CMP – Coming Soon & Maintenance Plugin by NiteoThemes