MEDIUM
CMP – Coming Soon & Maintenance
CVE published 2026-10-21
CVE-2026-101138
The CVE-2026-101138 vulnerability affects the CMP – Coming Soon & Maintenance WordPress plugin, specifically versions 4.1.19 and 4.1.20. This vulnerability allows unauthenticated visitors to bypass maintenance mode and access whitelisted pages. The vulnerability has a CVSS score of 5.3 and a severity of MEDIUM. Defenders should assess exposure and prioritize verification and potential upgrades. The vulner [truncated]