What’s Vulnerable › Products

niteo CMP – Coming Soon & Maintenance Plugin by NiteoThemes vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your niteo CMP – Coming Soon & Maintenance Plugin by NiteoThemes version is affected

Latest niteo CMP – Coming Soon & Maintenance Plugin by NiteoThemes vulnerabilities

• CVE-2026-12470 — CMP <= 4.1.17 - Authenticated (Editor+) Privilege Escalation via Arbitrary Option Update to cmp_ajax_import_settings AJAX Action (CVSS 7.2)
• CVE-2026-13416 — CMP - Coming Soon & Maintenance < 4.1.18 - Editor+ Stored XSS via niteoCS_socialmedia (CVSS 3.5)
• CVE-2026-13415 — CMP - Coming Soon & Maintenance < 4.1.18 - Editor+ Privilege Escalation via cmp_ajax_import_settings (CVSS 7.2)
• CVE-2026-13414 — CMP - Coming Soon & Maintenance < 4.1.18 - Unauthenticated Maintenance Mode Disable via cmp_disable_comingsoon_ajax (CVSS 4.8)
• CVE-2026-6518 — CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.16 - Missing Authorization to Authenticated (Administrator+) Arbitrary File Upload and Remote Code Execution (CVSS 8.8)
• CVE-2023-2159 — CMP – Coming Soon & Maintenance <= 4.1.7 - Maintenance Mode Bypass (CVSS 5.3)
• CVE-2020-36730 — CMP <= 3.8.1 - Missing Authorization (CVSS 9.3)
• CVE-2022-0188 — Coming Soon & Maintenance Plugin by NiteoThemes < 4.0.19 - Unauthenticated Arbitrary CSS Update (CVSS 5.3)