Now officially on WordPress.org

CVE Database / CVE-2023-1263

CVE · Medium

CVE-2023-1263 — CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 4.1.7

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2023-1263 CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 4.1.7 Exposure of Sensitive Information to an Unauthorized Actor Medium 5.3 < 4.1.7 4.1.7 2023-03-07 —

CVE-2023-1263

The CMP – Coming Soon & Maintenance plugin through version 4.1.6 contains an information exposure flaw in the cmp_get_post_detail function that permits unauthenticated users to retrieve the full content of any published post or page lacking password protection, regardless of whether the site is in maintenance mode. An attacker could exploit this vulnerability to access sensitive information that should otherwise be hidden during site maintenance. The issue was resolved in version 4.1.7.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings