NiteoThemes vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.7%	CVE-2025-32118CMP (WordPress plugin) · Unrestricted File Upload Critical9.1EPSS 0.7%2025-04-04CVE Database V5CVE-2025-32118 Unrestricted Upload of File with Dangerous Type vulnerability in NiteoThemes CMP – Coming Soon & Maintenance cmp-coming-soon-maintenance allows Using Malicious Files.This issue affects CMP – Coming Soon & Maintenance: from n/a through <= 4.1.14. EPSS 0.7%Vulnerability NiteoThemes	CVE Database V5	2025-04-04
Medium	4.3	EPSS 0.2%	CVE-2025-31769CLP (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-04-01CVE Database V5CVE-2025-31769 Cross-Site Request Forgery (CSRF) vulnerability in NiteoThemes CLP – Custom Login Page by NiteoThemes clp-custom-login-page allows Cross Site Request Forgery.This issue affects CLP – Custom Login Page by NiteoThemes: from n/a through <= 1.5.5. EPSS 0.2%Vulnerability NiteoThemes	CVE Database V5	2025-04-01

Page 1 of 1