Known vulnerabilities in Under Construction, Coming Soon & Maintenance Mode

Under Construction is a simple plugin for setting up Under Construction, Coming Soon and Maintenance Mode using WordPress Customizer.

3Reported vulnerabilities

7.2Highest CVSS score

3.0.1Latest version

10,000+Active installs

What to do now

Update Under Construction, Coming Soon & Maintenance Mode to 2.1.2 or later. 3 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 16, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
WF-86c1b729-e8fe-46e8-8d57-c6312087c6b2	High 7.2	—	Before 1.1.2	`1.1.2`	February 27, 2021
WF-5f6b88fb-1070-427b-a51f-23fbede3dd59	Medium 6.1	—	1.1.1 and earlier	`1.1.2`	February 27, 2021
CVE-2026-34896	Medium 4.3	0.1%	2.1.1 and earlier	`2.1.2`	April 7, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.