CVE-2023-1263

MEDIUM NUCLEI

CMP - Coming Soon & Maintenance < 4.1.6 - Unauthenticated Information Exposure via cmp_get_post_detail Function

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2023-1263 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Description

The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 4.1.6 via the cmp_get_post_detail function. This can allow unauthenticated individuals to obtain the contents of any non-password-protected, published post or page even when maintenance mode is enabled.

Nuclei Templates (1)

Coming Soon & Maintenance < 4.1.7 - Unauthenticated Post/Page Access
MEDIUMVERIFIEDby r3Y3r53
Shodan: http.html:/wp-content/plugins/cmp-coming-soon-maintenance/
FOFA: body=/wp-content/plugins/cmp-coming-soon-maintenance/

References (3)

Core 3

Scores

CVSS v3 5.3
EPSS 0.0141
EPSS Percentile 69.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-200
Status published
Products (2)
niteo/CMP – Coming Soon & Maintenance Plugin by NiteoThemes < 4.1.6
niteothemes/coming_soon_\&_maintenance < 4.1.6
Published Mar 07, 2023
Tracked Since Feb 18, 2026