PatchSiren

CMP – Coming Soon & Maintenance CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM CMP – Coming Soon & Maintenance CVE published 2026-10-21

CVE-2026-101138

The CVE-2026-101138 vulnerability affects the CMP – Coming Soon & Maintenance WordPress plugin, specifically versions 4.1.19 and 4.1.20. This vulnerability allows unauthenticated visitors to bypass maintenance mode and access whitelisted pages. The vulnerability has a CVSS score of 5.3 and a severity of MEDIUM. Defenders should assess exposure and prioritize verification and potential upgrades. The vulner [truncated]