Known vulnerabilities in LightStart – Maintenance Mode, Coming Soon and Landing Page Builder

Easy Drag & Drop Page Builder that adds a splash page to your site that it's perfect for a coming soon page, maintenance or landing page.

6Reported vulnerabilities

7.2Highest CVSS score

2.6.23Latest version

400,000+Active installs

What to do now

Update LightStart – Maintenance Mode, Coming Soon and Landing Page Builder to 2.6.9 or later. 6 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 29, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2022-1576	Medium 6.5	0.5%	Before 2.4.5	`2.4.5`	July 11, 2022
CVE-2018-20156	High 7.2	1.5%	Before 2.0.7	`2.0.7`	December 14, 2018
CVE-2013-3250	Medium 6.8	1.0%	Before 1.8.8	`1.8.8`	June 21, 2013
CVE-2018-20155	Medium 4.3	0.8%	Before 2.0.7	`2.0.7`	December 14, 2018
CVE-2018-20154	Medium 4.3	1.0%	Before 2.0.7	`2.0.7`	December 14, 2018
CVE-2023-7019	Medium 4.3	0.3%	2.6.8 and earlier	`2.6.9`	January 11, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.