PLUGIN SECURITY
Is Cmp Coming Soon Maintenance safe?
Beautiful Coming soon, Maintenance or Landing page on your website, packed with premium features for free.
What this plugin does
- Slug:
cmp-coming-soon-maintenance - Author: NiteoThemes
- 200000+ active installs
- 94/100 rating (326 reviews on wordpress.org)
- 6863049 all-time downloads
- On WordPress.org since 2017-03-13
coming sooncoming soon pagelaunch pagemaintenance modeunder construction
Maintenance status
- Latest known version: 4.1.17
- Last updated: 2026-10-16 7:27pm GMT
- Tested up to WordPress: 7.1.3
- Requires PHP: 5.6+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
13 known CVEs on file for Cmp Coming Soon Maintenance. Reported between 2020 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-101138 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] >= 4.1.19 - < 4.1.21 | Improper Access Control | Medium 5.3 | 4.1.19–4.1.21 | 4.1.21 | 2026-10-21 | ⚠ update needed |
| CVE-2026-13413 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 4.1.20 | Improper Access Control | Medium 5.3 | < 4.1.20 | 4.1.20 | 2026-10-02 | ⚠ update needed |
| CVE-2026-12470 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 4.1.18 | Improper Privilege Management | High 7.2 | < 4.1.18 | 4.1.18 | 2026-08-28 | ⚠ update needed |
| CVE-2026-13416 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 4.1.18 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Unknown | < 4.1.18 | 4.1.18 | 2026-08-27 | ⚠ update needed |
| CVE-2026-13415 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 4.1.18 | Improper Privilege Management | Unknown | < 4.1.18 | 4.1.18 | 2026-08-27 | ⚠ update needed |
| CVE-2026-13414 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 4.1.18 | Missing Authorization | Unknown | < 4.1.18 | 4.1.18 | 2026-08-27 | ⚠ update needed |
| CVE-2026-6518 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 4.1.17 | Unrestricted Upload of File with Dangerous Type | High 8.8 | < 4.1.17 | 4.1.17 | 2026-04-17 | ✓ fixed in latest |
| CVE-2025-32118 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 4.1.15 | Unrestricted Upload of File with Dangerous Type | Critical 9.1 | < 4.1.15 | 4.1.15 | 2025-04-04 | ✓ fixed in latest |
+ 12 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2023-50374 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 4.1.11 | Server-Side Request Forgery (SSRF) | Medium 5.5 | < 4.1.11 | 4.1.11 | 2024-03-27 | ✓ fixed in latest |
| CVE-2023-2159 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 4.1.8 | Improper Access Control | Medium 5.3 | < 4.1.8 | 4.1.8 | 2023-04-18 | ✓ fixed in latest |
| CVE-2023-1263 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 4.1.7 | Exposure of Sensitive Information to an Unauthorized Actor | Medium 5.3 | < 4.1.7 | 4.1.7 | 2023-03-07 | ✓ fixed in latest |
| CVE-2022-0188 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 4.0.19 | Missing Authentication for Critical Function | Medium 5.3 | < 4.0.19 | 4.0.19 | 2022-01-17 | ✓ fixed in latest |
| — | CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 4.0.10 | — | Unknown | < 4.0.10 | 4.0.10 | 2021-05-02 | ✓ fixed in latest |
| — | CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 4.0.10 | — | Unknown | < 4.0.10 | 4.0.10 | 2021-05-02 | ✓ fixed in latest |
| — | CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 3.8.2 | — | Unknown | < 3.8.2 | 3.8.2 | 2020-08-04 | ✓ fixed in latest |
| — | CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 3.8.2 | — | Unknown | < 3.8.2 | 3.8.2 | 2020-08-04 | ✓ fixed in latest |
| — | CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 3.8.2 | — | Unknown | < 3.8.2 | 3.8.2 | 2020-08-04 | ✓ fixed in latest |
| CVE-2020-36730 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 3.8.2 | Missing Authorization | High 8.3 | < 3.8.2 | 3.8.2 | 2020-08-04 | ✓ fixed in latest |
| — | CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 3.8.2 | — | Unknown | < 3.8.2 | 3.8.2 | — | ✓ fixed in latest |
| CVE-2020-36730 | CMP - Coming Soon & Maintenance < 3.8.2 - Improper Access Controls on AJAX Calls | — | Unknown | < 3.8.2 | 3.8.2 | — | ✓ fixed in latest |
How to fix it
Keep Cmp Coming Soon Maintenance updated — 4.1.17 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Maintenance — 1000000+ active installs — 88/100 (869) — max PHP 8.4
- Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode — 600000+ active installs — 98/100 (4699) — max PHP <8.0
- Under Construction — 600000+ active installs — 96/100 (1285) — max PHP 8.4
- LightStart – Maintenance Mode, Coming Soon and Landing Page Builder — 400000+ active installs — 86/100 (874) — max PHP 8.4
- Minimal Coming Soon – Coming Soon Page — 100000+ active installs — 86/100 (282)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.