Medium
CVE-2026-13413
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 93
Reset filters
High
CVE-2026-12470
CMP <= 4.1.17 - Authenticated (Editor+) Privilege Escalation via Arbitrary Option Update to cmp_ajax_import_settings AJAX Action
Medium
CVE-2026-13415
CMP – Coming Soon & Maintenance Plugin by NiteoThemes < 4.1.18 - Authenticated (Editor+) Privilege Escalation
Medium
CVE-2026-13414
CMP – Coming Soon & Maintenance Plugin by NiteoThemes < 4.1.18 - Missing Authorization to Unauthenticated Settings Change
Medium
CVE-2026-13416
CMP – Coming Soon & Maintenance Plugin by NiteoThemes < 4.1.18 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-14785
Website Builder by SeedProd - Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'seedprodnestedmenuwidget' Shortcode
Medium
CVE-2026-57617
SeedProd Pro < 6.19.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-48972
SeedProd Pro < 6.19.5 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-6518
CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.16 - Missing Authorization to Authenticated (Administrator+) Arbitrary File Upload and Remote Code Execution
Medium
CVE-2026-39464
Coming Soon Page, Under Construction & Maintenance Mode by SeedProd <= 6.19.8 - Authenticated (Editor+) Server-Side Request Forgery
Medium
CVE-2026-27354
WooCommerce Coming Soon Product with Countdown <= 5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2025-68552
WooCommerce Coming Soon Product with Countdown <= 5.0 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2025-62083
BoomDevs WordPress Coming Soon <= 1.0.4 - Unauthenticated Information Exposure
Medium
CVE-2026-27368
Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.19.8 - Missing Authorization
Medium
CVE-2025-58815
Aitasi Coming Soon <= 2.0.2 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-3949
Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.18.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2025-32578
Coming Soon Countdown <= 2.2 - Reflected Cross-Site Scripting
Critical
CVE-2025-32663
FAT Cooming Soon <= 1.1 - Unauthenticated Local File Inclusion
High
CVE-2025-32118
CMP – Coming Soon & Maintenance <= 4.1.13 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2025-24546
Ultimate Coming Soon & Maintenance <= 1.0.9 - Cross-Site Request Forgery
Medium
CVE-2025-23836
Custom Coming Soon <= 2.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-9503
Maintenance & Coming Soon Redirect Animation <= 2.1.3 - Missing Authorization to Settings Update
Medium
CVE-2024-54283
SeedProd Pro <= 6.18.12 - Authenticated (Editor+) SQL Injection
Medium
CVE-2024-54284
SeedProd Pro <= 6.18.12 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.