CVE-2022-0188 Coming Soon & Maintenance Plugin by NiteoThemes < 4.0.19 - Unauthenticated Arbitrary CSS Update

2022-02-1409:20:58

WPScan

www.cve.org

cve-2022-0188

niteothemes

maintenance plugin

EPSS

0.001

Percentile

35.0%

JSON

The CMP WordPress plugin before 4.0.19 allows any user, even not logged in, to arbitrarily change the coming soon page layout.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "CMP",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "4.0.19"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]