CVE-2026-13416

CVE-2026-13416 is a stored XSS vulnerability in the CMP WordPress plugin prior to version 4.1.18 . The plugin fails to sanitize and escape a settings value before rendering it on the coming-soon page . This allows any user with the Editor role — provided the administrator has granted that role ac...