Known vulnerabilities in CMP – Coming Soon & Maintenance Plugin by NiteoThemes

Beautiful Coming soon, Maintenance or Landing page on your website, packed with premium features for free.

9Reported vulnerabilities

8.8Highest CVSS score

4.1.17Latest version

200,000+Active installs

What to do now

Update CMP – Coming Soon & Maintenance Plugin by NiteoThemes to 4.1.18 or later. 9 of these have a fixed version available. Updating resolves them.

Plugin last updated: April 7, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2022-0188	Medium 5.3	2.3%	Before 4.0.19	`4.0.19`	February 14, 2022
CVE-2023-2159	Medium 5.3	0.8%	Before 4.1.8	`4.1.8`	June 9, 2023
CVE-2026-6518	High 8.8	0.9%	0 to 4.1.16 (inclusive)	`4.1.17`	April 18, 2026
CVE-2025-32118	High 7.2	0.7%	4.1.13 and earlier	`4.1.15`	April 4, 2025
CVE-2023-1263	Medium 5.3	1.4%	4.1.6 and earlier	`4.1.7`	March 7, 2023
CVE-2023-50374	Medium 5.5	0.4%	4.1.10 and earlier	`4.1.11`	March 27, 2024
CVE-2026-13414	Medium 5.3	0.1%	Before 4.1.18	`4.1.18`	August 27, 2026
CVE-2026-13415	Medium 4.7	0.3%	Before 4.1.18	`4.1.18`	August 28, 2026
CVE-2026-13416	Medium 4.4	0.1%	Before 4.1.18	`4.1.18`	August 25, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.