PLUGIN SECURITY
Is Under Construction Page safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Under Construction Page WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
under-construction-page - Requires PHP: 5.2+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
- Under Construction [under-construction-page] < 3.86 [WordPress Under Construction plugin <= 3.85 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability]
- Under Construction [under-construction-page] < 3.86 [Under Construction < 3.86 - Authenticated Stored Cross-Site Scripting (XSS)]
- Under Construction [under-construction-page] < 3.86 [Under Construction <= 3.85 - Authenticated Stored Cross-Site Scripting]
- Under Construction [under-construction-page] < 3.97 [WordPress Under Construction Plugin <= 3.96 is vulnerable to Cross Site Request Forgery (CSRF)]
- Under Construction [under-construction-page] < 3.97 [CVE-2023-0832, Under Construction <= 3.96 - Cross-Site Request Forgery via admin_action_install_weglot]
+ 2 more known vulnerabilities
- Under Construction [under-construction-page] < 3.97 [CVE-2023-0831, Under Construction <= 3.96 - Cross-Site Request Forgery via admin_action_ucp_dismiss_notice, Under Construction < 3.97 - Multiple CSRF]
- Under Construction [under-construction-page] < 5.81 [CVE-2026-11426, UnderConstructionPage PRO <= 5.76 - Authenticated (Subscriber+) Arbitrary File Read via template_thumbnail Parameter, UnderConstructionPage PRO <= 5.76 - Authenticated (Subscriber+) Arbitrary File Read via template_thumbnail Parameter]
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Safer / more established alternatives
- Maintenance — 1000000+ active installs — max PHP 8.4
- Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode — 700000+ active installs — max PHP <8.0
- CMP – Coming Soon & Maintenance Plugin by NiteoThemes — 200000+ active installs — max PHP 8.4
- Minimal Coming Soon – Coming Soon Page — 100000+ active installs
- Site Offline Or Coming Soon Or Maintenance Mode — 30000+ active installs
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.