CVE-2023-1263

MEDIUM NUCLEI

Niteothemes Coming Soon & Maintenance < 4.1.6 - Information Disclosure

Title source: rule

Description

The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 4.1.6 via the cmp_get_post_detail function. This can allow unauthenticated individuals to obtain the contents of any non-password-protected, published post or page even when maintenance mode is enabled.

Nuclei Templates (1)

Coming Soon & Maintenance < 4.1.7 - Unauthenticated Post/Page Access
MEDIUMVERIFIEDby r3Y3r53
Shodan: http.html:/wp-content/plugins/cmp-coming-soon-maintenance/
FOFA: body=/wp-content/plugins/cmp-coming-soon-maintenance/

References (3)

Scores

CVSS v3 5.3
EPSS 0.2292
EPSS Percentile 95.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-200
Status published
Products (2)
niteo/CMP – Coming Soon & Maintenance Plugin by NiteoThemes < 4.1.6
niteothemes/coming_soon_\&_maintenance < 4.1.6
Published Mar 07, 2023
Tracked Since Feb 18, 2026