CMP – Coming Soon & Maintenance Plugin by NiteoThemes

CMP – Coming Soon & Maintenance Plugin by NiteoThemes has 10 disclosed vulnerabilities in the WordSec catalog, reported between 2020 and 2026; all 10 are fixed as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2026 was the busiest year with 4 disclosures.

The most common weakness is Missing Authorization, behind 3 of the records (30%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type, Cross-Site Scripting.

Every one of the 10 issues recorded for CMP – Coming Soon & Maintenance Plugin by NiteoThemes has a vendor fix available, so running the current release closes all known holes.

7 independent researchers contributed these findings, most of them (3) reported by Revanth Hari Narayana Matte. CMP – Coming Soon & Maintenance Plugin by NiteoThemes is installed on roughly 200,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.0/ 10
Patch Coverage100%
Open

0

Fixed

10

Get automatic notifications for all CMP – Coming Soon & Maintenance Plugin by NiteoThemes vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2026-6518

CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.16 - Missing Authorization to Authenticated (Administrator+) Arbitrary File Upload and Remote Code Execution

Read the full analysis

Vulnerability Records

10 records
2026-08-28 00:00CVE-2026-13415
4.7
Medium
Revanth Hari Narayana MatteYes
2026-08-27 00:00CVE-2026-13414
5.3
Medium
Revanth Hari Narayana MatteYes
2026-08-25 00:00CVE-2026-13416
4.4
Medium
Revanth Hari Narayana MatteYes
2026-04-17 15:02CVE-2026-6518
8.8
High
Bao LeYes
2025-04-04 00:00CVE-2025-32118
7.2
High
SavPhill (Savphill)Yes
2024-03-27 00:00CVE-2023-50374
5.5
Medium
Yuchen JiYes
2023-04-18 00:00CVE-2023-2159
5.3
Medium
Marco WotschkaYes
2023-03-07 00:00CVE-2023-1263
5.3
Medium
Marco WotschkaYes
2022-01-17 00:00CVE-2022-0188
5.3
Medium
Krzysztof ZającYes
2020-08-04 00:00CVE-2020-36730
8.3
High
Jerome BruandetYes
Showing 1–10 of 10 reports
CMP – Coming Soon & Maintenance Plugin by NiteoThemes banner
Latestv4.1.19

CMP – Coming Soon & Maintenance Plugin by NiteoThemes

NiteoThemes

Author

NiteoThemes

4.7(326)
94/100
Last Updated
2026-09-07 (5d ago)
Active Installs
200,000+
Downloads
6,526,268
Requires WP
3.0+
Requires PHP
5.6+
Tested up to
WP 7.1
Created
2017-03-13 (10y ago)

CMP – Coming Soon & Maintenance plugin has all premium features you ever wished for, and it is free! It is also super fast and user friendly. You can activate your Maintenance, Coming soon(under construction) or a Landing page with a single click. Customizable in many ways – you can select a layout from predefined Themes, set custom logo, background graphics (including YouTube videos or Unsplash images), custom text or graphic content, subscribe form, social networks icons, change typography, colors, SEO, and many more. Packed with functions like Whitelist/Blacklist to enable CMP only on specific pages, User Roles Management, custom URL Bypass, Translation strings, custom Subscribers option and many more you would not believe it is free. No ADS too, guaranteed! Live Preview Click for CMP preview>> TIP! Change to another CMP Theme, background or special effects in the right sidebar. Best Features You can choose from 3 bundled free themes and 20+ downloadable themes – both freebies and premium – with completely different design. New CMP Theme is released every 1-2 months! CMP plugin works with any WordPress Theme and on all desktop and mobile devices (yes it is 100% responsive!). Custom Subscribe Form to collect E-mails in local database, MailChimp, MailPoet or Mailster. Set fullscreen background media including Videos (YouTube, custom video file), Images or Image Slider, Patterns, Color Gradients or Solid Colors with a graphic overlay. You can search from more than 1.000.000+ of free beautiful professional photos from most popular Unsplash source via our built-in search API (random images, search by keyword, category, etc). You can set custom Logo, choose from 100 most popular Google fonts and customize Font Weight, Letter Spacing and Line Height. Display beautiful icons for any Social network on your website. Background 3D effects on all downloaded CMP Themes. CMP Landing page can be enabled on specific pages only (Blacklist and Whitelist) if required. WordPress roles to bypass CMP and display your full website for logged-in users. Bypass URL to preview a website for your customers. WPML and Polylang is fully supported to display your awesome Coming soon page in more languages. All strings are Fully translatable. Display Login Icon Button on Coming soon pages. Compatible with custom WordPress login URL. GDPR ready. Configurable Countdown Action – disable Coming soon / Maintenance mode, Hide counter or redirect to another website. Configurable SEO meta tags for search engines, editable favicon, Search Engine Visibility and No-cache Headers. Set response code to search engines (200 OK, 503 Maintenance). Redirect Mode to redirect your website to another website. Support for any website Analytics like Google Analytics or similar. Subscribe feature protected by Google Recaptcha integration. Insert any Custom CSS code. Compatible Plugins Insert Headers and Footers fully compatible. Simple Analytics fully compatible. MailPoet – Emails and Newsletters in WordPress fully integrated. Mailster – The Ultimate Newsletter Plugin for WordPress fully integrated. MailOptin – WordPress Popup, Optin Form, Email Newsletter Plugin fully integrated. WPS Hide Login full automatic compatibility. Cookie Notice for GDPR & CCPA full automatic compatibility. Translate WP website – Weglot Translate full automatic compatibility. We are working on more plugins to be compatible with CMP – feel free to send us suggestions what plugin you might need together with CMP. Customize WordPress Login Page? Check out our latest plugin for a login page customization – CLP – Custom Login Page. It’s super easy and awesome! Administration page overview

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C