https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-2159.htmlhttps://patchthecve.com/cve/CVE-2023-2159.htmlWed, 17 Jun 2026 05:51:53 +0000MEDIUM 5.3: The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Maintenance Mode Bypass in versions up to, and including, 4.1.7. A correct cmp_bypass GET parameter in the URL (equal to the md5-hashed home_url in the default setting) allows users to visit a site placed in maintenance mode thttps://patchthecve.com/cve/CVE-2020-36730.htmlhttps://patchthecve.com/cve/CVE-2020-36730.htmlWed, 17 Jun 2026 03:16:04 +0000HIGH 8.3: The CMP for WordPress is vulnerable to authorization bypass due to a missing capability check on the cmp_get_post_detail(), niteo_export_csv(), and cmp_disable_comingsoon_ajax() functions in versions up to, and including, 3.8.1. This makes it possible for unauthenticated attackers to read posts, exphttps://patchthecve.com/cve/CVE-2023-1263.htmlhttps://patchthecve.com/cve/CVE-2023-1263.htmlWed, 17 Jun 2026 05:27:29 +0000MEDIUM 5.3: The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 4.1.6 via the cmp_get_post_detail function. This can allow unauthenticated individuals to obtain the contents of any non-password-protected, published post or page even w