medium5.3
CVE-2022-0188
The CMP WordPress plugin before 4.0.19 allows any user, even not logged in, to arbitrarily change the coming soon page layout.
Impact
The CMP WordPress plugin before 4.0.19 allows any user, even not logged in, to arbitrarily change the coming soon page layout.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Niteothemes | Cmp | before 4.0.19 |
Weakness classification
References
- NVD record
- CVE.org record
- https://plugins.trac.wordpress.org/changeset/2657597/cmp-coming-soon-maintenance
- https://wpscan.com/vulnerability/50b6f770-6f53-41ef-b2f3-2a58e9afd332
- https://plugins.trac.wordpress.org/changeset/2657597/cmp-coming-soon-maintenance
- https://wpscan.com/vulnerability/50b6f770-6f53-41ef-b2f3-2a58e9afd332