https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T14:39:21.696277+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-36730 CVE-2020-36730 — CMP <= 3.8.1 - Missing Authorization 2026-10-08T14:39:21.697475+00:00

Affected: niteo CMP – Coming Soon & Maintenance Plugin by NiteoThemes

The CMP for WordPress is vulnerable to authorization bypass due to a missing capability check on the cmp_get_post_detail(), niteo_export_csv(), and cmp_disable_comingsoon_ajax() functions in versions up to, and including, 3.8.1. This makes it possible for unauthenticated attackers to read posts, export subscriber lists, and/or deactivate the plugin.