CVE-2025-32118

Name of the Vulnerable Software and Affected Versions NiteoThemes CMP – Coming Soon & Maintenance versions through 4.1.13

Description The issue is related to an Unrestricted Upload of File with Dangerous Type, allowing the use of malicious files. This can potentially lead to remote code execution (RCE) exploits.

Recommendations For versions through 4.1.13, update to a version later than 4.1.13 to resolve the issue. As a temporary workaround, consider restricting file uploads to only necessary and safe file types until a patch is available. Avoid using the plugin until the issue is resolved, to minimize the risk of exploitation.