CVE-2022-0188: Coming Soon & Maintenance Plugin by NiteoThemes < 4.0.19 - Unauthenticated Arbitrary CSS Update
Published Feb 14, 2022
·Updated
The CMP WordPress plugin before 4.0.19 allows any user, even not logged in, to arbitrarily change the coming soon page layout.
Affected Software
1 affected component
NiteoThemes CMP WordPress<4.0.19
Remediation
Event History
Feb 14, 2022
CVE Published
via MITRE·09:20 AM
Data Sourced
via MITRE·09:20 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-0188?
CVE-2022-0188 is considered a medium severity vulnerability that allows unauthorized users to change the coming soon page layout.
2
How do I fix CVE-2022-0188?
To fix CVE-2022-0188, update the CMP WordPress plugin to version 4.0.19 or later.
3
Who is affected by CVE-2022-0188?
Any user of the CMP WordPress plugin version prior to 4.0.19 is affected by CVE-2022-0188.
4
What can attackers do with CVE-2022-0188?
Attackers can exploit CVE-2022-0188 to arbitrarily change the layout of the coming soon page without requiring any authentication.
5
When was CVE-2022-0188 disclosed?
CVE-2022-0188 was disclosed with an available fix in the CMP WordPress plugin version 4.0.19.