CVE-2022-0188

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The CMP WordPress plugin before 4.0.19 allows any user, even not logged in, to arbitrarily change the coming soon page layout.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-306

Affected software

VendorProductVersions
UnknownCMP< 4.0.19

References

Timeline

Published
Feb 14, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-01896.1The WP RSS Aggregator WordPress plugin before 4.20 does not sanitise and escape the id parameter in the wprss_fetch_items_row_action AJAX acCVE-2022-01908.8The Ad Invalid Click Protector (AICP) WordPress plugin before 1.2.6 is affected by a SQL Injection in the id parameter of the delete action.CVE-2022-01916.5The Ad Invalid Click Protector (AICP) WordPress plugin before 1.2.7 does not have CSRF check deleting banned users, which could allow attackCVE-2022-01927.8A DLL search path vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow privilege escalation.CVE-2022-01936.1The Complianz WordPress plugin before 6.0.0 does not escape the s parameter before outputting it back in an attribute in an admin page, leadCVE-2022-01949.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required tCVE-2022-01968.8phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)CVE-2022-01978.8phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)CVE-2022-01987.1corenlp is vulnerable to Improper Restriction of XML External Entity ReferenceCVE-2022-01994.3The Coming soon and Maintenance mode WordPress plugin before 3.6.8 does not have CSRF check in its coming_soon_send_mail AJAX action, allowiCVE-2022-02005.4Themify Portfolio Post WordPress plugin before 1.1.7 does not sanitise and escape the num_of_pages parameter before outputting it back the rCVE-2022-02016.1The Permalink Manager Lite WordPress plugin before 2.2.15 and Permalink Manager Pro WordPress plugin before 2.2.15 do not sanitise and escap
CVE-2022-0188: Medium severity, CVSS 5.3 | Vulnix