Cmp (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-27. Vendor: Unknown.

CVEs of Cmp

• CVE-2026-13416 - CVSS 3.5 (low), 2026-08-27: The CMP WordPress plugin before 4.1.18 does not sanitise and escape a settings value before outputting it on the coming-soon page, allowing users with the…
• CVE-2026-13415 - CVSS 7.2 (high), 2026-08-27: The CMP WordPress plugin before 4.1.18 does not enforce an option-name allow-list when importing settings via one of its AJAX actions, allowing users with the…
• CVE-2026-13414 - CVSS 4.8 (medium), 2026-08-27: The CMP WordPress plugin before 4.1.18 does not perform authorization checks on one of its AJAX actions and relies on a nonce that is skipped for certain (and…
• CVE-2022-0188 - CVSS 5.3 (medium), 2022-02-14: The CMP WordPress plugin before 4.0.19 allows any user, even not logged in, to arbitrarily change the coming soon page layout.