Description
The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Maintenance Mode Bypass in versions up to, and including, 4.1.7. A correct cmp_bypass GET parameter in the URL (equal to the md5-hashed home_url in the default setting) allows users to visit a site placed in maintenance mode thus bypassing the plugin's provided feature.
Published: 2023-06-09
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-33677 The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Maintenance Mode Bypass in versions up to, and including, 4.1.7. A correct cmp_bypass GET parameter in the URL (equal to the md5-hashed home_url in the default setting) allows users to visit a site placed in maintenance mode thus bypassing the plugin's provided feature.
History

Wed, 08 Apr 2026 18:30:00 +0000

Type Values Removed Values Added
Title CMP – Coming Soon & Maintenance <= 4.1.7 - Maintenance Mode Bypass
Weaknesses CWE-284

Sat, 28 Dec 2024 02:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Niteothemes Cmp
cve-icon MITRE

Status: PUBLISHED

Assigner: Wordfence

Published:

Updated: 2026-04-08T17:15:37.762Z

Reserved: 2023-04-18T14:09:08.727Z

Link: CVE-2023-2159

cve-icon Vulnrichment

Updated: 2024-08-02T06:12:20.613Z

cve-icon NVD

Status : Modified

Published: 2023-06-09T06:16:04.290

Modified: 2026-04-08T19:18:12.243

Link: CVE-2023-2159

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses