Nniteo

Products

Exploited and recent CVEs

• CVE-2026-12470 High 7.2 CMP <= 4.1.17 - Authenticated (Editor+) Privilege Escalation via Arbitrary Option Update to cmp_ajax_import_settings AJAX Action 0.6%
• CVE-2026-6518 High 8.8 CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.16 - Missing Authorization to Authenticated (Administrator+) Arbitrary File Upload and Remote Code Execution 0.9%
• CVE-2023-2159 Medium 5.3 CMP – Coming Soon & Maintenance <= 4.1.7 - Maintenance Mode Bypass 0.8%
• CVE-2020-36730 High 8.3 CMP <= 3.8.1 - Missing Authorization 2.3%
• CVE-2023-1263 Medium 5.3 CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.6 - Information Exposure 1.4%