CVE-2022-0188

EUVD-2022-15392
The CMP WordPress plugin before 4.0.19 allows any user, even not logged in, to arbitrarily change the coming soon page layout.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
Affected Products (NVD)
VendorProductVersion
niteothemescmp
𝑥
< 4.0.19
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://plugins.trac.wordpress.org/changeset/2657597/cmp-coming-soon-maintenance
https://wpscan.com/vulnerability/50b6f770-6f53-41ef-b2f3-2a58e9afd332
https://plugins.trac.wordpress.org/changeset/2657597/cmp-coming-soon-maintenance
https://wpscan.com/vulnerability/50b6f770-6f53-41ef-b2f3-2a58e9afd332