CVE-2023-1263

The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 4.1.6 via the cmp_get_post_detail function. This can allow unauthenticated individuals to obtain the contents of any non-password-protected, published post or page even when maintenance mode is enabled.

We have discovered 1,416 live websites that are affected by CVE-2023-1263.

Run a Free Instant Scan



Affected Software

Product  Cmp Coming Soon Maintenance
Category Wordpress Plugins
Vulnerable Domains1,416 live websites (17% of Cmp Coming Soon Maintenance install base)
Vulnerable Versions
  • from 0 through 4.1.6
Vulnerable Versions Count71 versions ( 88% of all versions)



Details

  • Published - Mar 7, 2023
  • Updated - Jan 13, 2025

Credits

  • Marco Wotschka (finder)

Website Distribution by Country

Number of websites using CVE-2023-1263
United States223 websites


Germany302 websites
Italy125 websites
GB86 websites
France83 websites
Netherlands54 websites
Spain46 websites
Switzerland31 websites
Denmark31 websites
Austria30 websites

Website Distribution by TLD

Number of websites using CVE-2023-1263
.com491 websites
.de168 websites
.it92 websites
.nl49 websites
.co.uk49 websites
.org30 websites
.net29 websites
.es29 websites
.fr28 websites
.at27 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2023-1263

Top websites that are affected by CVE-2023-1263. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*********.org France***,***
******.com United States***,***
******.org Italy*,***,***
*****.at Austria*,***,***
*********.hr Croatia*,***,***
****************.net GB*,***,***
*******.at France*,***,***
******************.com United States*,***,***
*************.com United States*,***,***
*************.pl Poland*,***,***
See full domain list

FAQ

A total of 1,416 websites have been identified as vulnerable to CVE-2023-1263, based on global website indexing conducted by WebTechSurvey.
The Cmp Coming Soon Maintenance is affected by the CVE-2023-1263 vulnerability.
Cmp Coming Soon Maintenance versions up to and including 4.1.6 are vulnerable to CVE-2023-1263.