LightStart – Maintenance Mode, Coming Soon and Landing Page Builder

LightStart – Maintenance Mode, Coming Soon and Landing Page Builder has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2013 and 2024; all 7 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 9.1 out of 10. Severity breakdown: 1 critical and 1 high. 2024 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 3 of the records (43%). Other recurring categories include Cross-Site Request Forgery (CSRF), Exposure Of Sensitive Information To An Unauthorized Actor.

Every one of the 7 issues recorded for LightStart – Maintenance Mode, Coming Soon and Landing Page Builder has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, most of them (2) reported by Sean Murphy. LightStart – Maintenance Mode, Coming Soon and Landing Page Builder is installed on roughly 400,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

7

Get automatic notifications for all LightStart – Maintenance Mode, Coming Soon and Landing Page Builder vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.1CVE-2018-20156

WP Maintenance Mode <= 2.0.6 - Remote Code Execution

Read the full analysis

Vulnerability Records

7 records
LightStart – Maintenance Mode, Coming Soon and Landing Page Builder banner
Latestv2.6.23

LightStart – Maintenance Mode, Coming Soon and Landing Page Builder

Themeisle

Author

Themeisle

4.3(873)
86/100
Last Updated
2026-08-20 (23d ago)
Active Installs
400,000+
Downloads
20,155,432
Requires WP
4.7+
Requires PHP
7.1+
Tested up to
WP 7.1
Created
2010-02-26 (17y ago)

Add a maintenance page to your blog that lets visitors know your blog is down for maintenance, add a coming soon page for a new website or create a landing page for an existing site. User with admin rights gets full access to the blog including the front end. Activate the plugin and your blog is in maintenance-mode, works and only registered users with enough rights can see the front end. You can use a date with a countdown timer for visitor information or set a value and unit for information. Also works with WordPress Multisite installs (each blog from the network has its own maintenance settings). Features Fully customizable (change colors, texts and backgrounds). Subscription form (export emails to .csv file). Countdown timer (remaining time). Contact form (receive emails from visitors). Coming soon page; Landing page templates; WordPress multisite; Responsive design; Social media icons; Works with any WordPress theme; SEO options; Exclude URLs from maintenance; Bot functionality to collect the emails in a friendly and efficient way; GDPR Ready; Bugs, technical hints or contribute Please give us feedback, contribute and file technical bugs on GitHub Repo. Credits Developed by Themeisle What’s Next If you like this plugin, then consider checking out our other projects: Optimole – Optimole is your all-in-one image optimization solution for WordPress & beyond. WPShout – In-Depth WordPress Tutorials for Developers Revive Social – Revive Old Posts helps you keep your content alive and in front the audiences that matter. CodeinWP – CodeinWP stands for all-things-WordPress. From web design to freelancing and from development to business, your questions are covered. DomainWheel – Free Short Website name generator, with the help of AI, for instant ideas. Check-out our blog to learn from our WordPress Reviews and see other WordPress plugins.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C