NiteoThemes CMP Coming Soon & Maintenance Unrestricted File Upload Vulnerability

Vulnerability

A vulnerability allowing unrestricted file uploads has been identified in the NiteoThemes CMP – Coming Soon & Maintenance plugin, affecting versions through 4.1.13. This vulnerability could be exploited to upload malicious files, potentially leading to remote code execution.

Impact

Exploitation of this vulnerability could allow a malicious actor to upload any type of file to the website, including backdoors that could be executed to gain further access.

Remediation

Users of the NiteoThemes CMP – Coming Soon & Maintenance plugin should update to version 4.1.15 or later to address this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
5.2
impact
10.0
exploitability
5.0
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.