PLUGIN SECURITY

Is Under Construction Page safe?

Easy to use Under Construction Page & Coming Soon Page. Enable Under Construction Mode in seconds & show you're Under Construction!

What this plugin does

  • Slug: under-construction-page
  • Author: WebFactory
  • 600000+ active installs
  • 96/100 rating (1285 reviews on wordpress.org)
  • 13626854 all-time downloads
  • On WordPress.org since 2013-12-01

coming soon modecoming soon pageunder constructionunder construction modeunder construction page

Maintenance status

  • Latest known version: 5.81
  • Last updated: 2026-08-16 7:44pm GMT
  • Tested up to WordPress: 7.1
  • Requires PHP: 5.2+
  • Max supported PHP (analyzed): 8.4

Known vulnerabilities

3 known CVEs on file for Under Construction Page. Reported between 2021 and 2026.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-11426 Under Construction [under-construction-page] < 5.81 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Medium 6.5 < 5.81 5.81 2026-07-10 ✓ fixed in latest
Under Construction [under-construction-page] < 3.97 Unknown < 3.97 3.97 2023-02-10 ✓ fixed in latest
CVE-2023-0832, CVE-2023-0831 Under Construction [under-construction-page] < 3.97 Cross-Site Request Forgery (CSRF) Medium 4.3 < 3.97 3.97 2023-02-10 ✓ fixed in latest
CVE-2023-0831 Under Construction [under-construction-page] < 3.97 Cross-Site Request Forgery (CSRF) Medium 4.3 < 3.97 3.97 2023-02-10 ✓ fixed in latest
Under Construction [under-construction-page] < 3.86 Unknown < 3.86 3.86 2021-01-20 ✓ fixed in latest
Under Construction [under-construction-page] < 3.86 Unknown < 3.86 3.86 2021-01-20 ✓ fixed in latest
Under Construction [under-construction-page] < 3.86 Unknown < 3.86 3.86 ✓ fixed in latest
Under Construction < 3.86 - Authenticated Stored Cross-Site Scripting (XSS) Unknown < 3.86 3.86 ✓ fixed in latest

How to fix it

Keep Under Construction Page updated — 5.81 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.