Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 23:38:27 +0000 CVE-2026-13414 — CMP - Coming Soon & Maintenance < 4.1.18 - Unauthenticated Maintenance Mode Disable via cmp_disable_comingsoon_ajax https://vulnerability.circl.lu/vuln/cve-2026-13414 <p><strong>Affected:</strong> Unknown CMP</p> <p>The CMP WordPress plugin before 4.1.18 does not perform authorization checks on one of its AJAX actions and relies on a nonce that is skipped for certain (and exposed to anonymous visitors on others), allowing unauthenticated attackers to disable the site&#39;s maintenance/coming-soon mode under a non-default countdown configuration.</p> <p><strong>Affected:</strong> Unknown CMP</p> <p>The CMP WordPress plugin before 4.1.18 does not perform authorization checks on one of its AJAX actions and relies on a nonce that is skipped for certain (and exposed to anonymous visitors on others), allowing unauthenticated attackers to disable the site&#39;s maintenance/coming-soon mode under a non-default countdown configuration.</p> https://vulnerability.circl.lu/vuln/cve-2026-13414