| CVE-2026-13415 |
The CMP WordPress plugin before 4.1.18 does not enforce an option-name allow-list when importing settings via one of…
|
7.2
High
|
Aug 27, 2026 |
| CVE-2026-13416 |
The CMP WordPress plugin before 4.1.18 does not sanitise and escape a settings value before outputting it on the…
|
3.5
Low
|
Aug 27, 2026 |
| CVE-2026-13414 |
The CMP WordPress plugin before 4.1.18 does not perform authorization checks on one of its AJAX actions and relies on a…
|
4.8
Medium
|
Aug 27, 2026 |
| CVE-2022-0188 |
The CMP WordPress plugin before 4.0.19 allows any user, even not logged in, to arbitrarily change the coming soon page…
|
Not rated
|
Feb 14, 2022 |