Unknown CMP

4 known vulnerabilities in Unknown CMP, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-13413 CVSS 5.3 medium The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.20 does not correctly restrict access to the site while…
  • CVE-2026-13416 CVSS 3.5 low The CMP WordPress plugin before 4.1.18 does not sanitise and escape a settings value before outputting it on the coming-soon page…
  • CVE-2026-13415 CVSS 7.2 high The CMP WordPress plugin before 4.1.18 does not enforce an option-name allow-list when importing settings via one of its AJAX actions…
  • CVE-2026-13414 CVSS 4.8 medium The CMP WordPress plugin before 4.1.18 does not perform authorization checks on one of its AJAX actions and relies on a nonce that is…