Coming Soon & Maintenance Mode by Colorlib

Coming Soon & Maintenance Mode by Colorlib has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 5.5 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Improper Access Control.

Every one of the 2 issues recorded for Coming Soon & Maintenance Mode by Colorlib has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Coming Soon & Maintenance Mode by Colorlib is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
5.4/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Coming Soon & Maintenance Mode by Colorlib vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.5CVE-2022-1945

Coming Soon & Maintenance Mode by Colorlib <= 1.0.98 - Administrator+ Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
Coming Soon & Maintenance Mode by Colorlib banner
Latestv1.4.0

Coming Soon & Maintenance Mode by Colorlib

colorlibplugins

Author

colorlibplugins

4.7(42)
94/100
Last Updated
2026-07-31 (1mo ago)
Active Installs
5,000+
Downloads
291,320
Requires WP
6.0+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2018-12-06 (8y ago)

Coming Soon & Maintenance Mode by Colorlib is a free WordPress plugin that lets you display a professional coming soon page, under construction page, or maintenance mode screen to your visitors while you work on your site behind the scenes. Set it up in minutes directly from the WordPress Live Customizer — no coding required. Choose from 15 fully responsive coming soon templates, each pre-designed with modern layouts and fully customizable through the Customizer. Add your own logo, background image, heading text, countdown timer, and social media links. Collect email subscribers with the built-in MailChimp integration so you can build your audience before launch day. Logged-in users can browse and edit the site normally while non-logged-in visitors see only the coming soon or maintenance page. The plugin also blocks the WordPress REST API for visitors to prevent content exposure while your site is under construction. Why Choose This Coming Soon Plugin? 100% free — no premium version, no ads, no feature restrictions 15 responsive templates — professionally designed coming soon, maintenance mode, and under construction page layouts Live Customizer — customize everything in real time without touching code Countdown timer — display a launch countdown with configurable date and 12/24-hour format MailChimp subscribe form — collect emails and grow your list while in maintenance mode Social media integration — add links to Facebook, Twitter, Instagram, YouTube, Pinterest, and email Custom logo and background — upload your brand logo and a custom background image Google Analytics 4 — track visitors to your coming soon page with GA4 Custom CSS — add your own styles for advanced customization REST API protection — blocks public API access while the site is under construction Developer friendly — use the ccsm_skip_redirect and ccsm_force_redirect filters to control redirect behavior Works with all WordPress themes — self-contained templates run independently of your active theme Privacy conscious — no tracking of its own. Note that enabling the optional Google Analytics field, and the Google Fonts each template loads, involve requests to Google, which you may need to disclose depending on your jurisdiction How It Works Install and activate the plugin Go to Coming Soon (in the WordPress admin menu) Pick a template and customize the content, colors, images, and countdown timer Enable coming soon mode — visitors see your launch page, you keep working Links Documentation and Support GitHub Repository This plugin is developed and maintained by Colorlib. If you enjoy using it, please leave a review — it helps other WordPress users discover the plugin.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C