Coming Soon & Maintenance Mode by Colorlib: Coming Soon and Maintenance Pages

Download Trends

Loading download data…

Vulnerabilities

2 Total

2 Patched

0 Active

100% Resolved rate

Coming Soon & Maintenance Mode by Colorlib <= 1.0.99 - Information Exposure

CWE-284 · Improper Access Control

The Coming Soon & Maintenance Mode by Colorlib plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.99 via the REST API. This makes it possible for unauthenticated attackers to obtain post and page contents via REST API thus bypassing maintenance mode protection provided by the plugin.

5.3 Medium Affected All – 1.0.99 Patched in ✓ 1.1.0 Published 19 Mar 2024 CVE CVE-2024-1473

Coming Soon & Maintenance Mode by Colorlib <= 1.0.98 - Administrator+ Cross-Site Scripting

CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The plugin Coming Soon & Maintenance Mode by Colorlib for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘input’ parameter of the ccsm_sanitize_google_analytics function in versions up to, and including, 1.0.98 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrative access to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

5.5 Medium Affected All – 1.0.98 Patched in ✓ 1.0.99 Published 27 May 2022 CVE CVE-2022-1945

About Coming Soon & Maintenance Mode by Colorlib

Create a coming soon page or maintenance mode screen with 15 responsive templates, countdown timer, MailChimp subscribe form, and social media links.

Coming Soon & Maintenance Mode by Colorlib is a free WordPress plugin that lets you display a professional coming soon page, under construction page, or maintenance mode screen to your visitors while you work on your site behind the scenes. Set it up in minutes directly from the WordPress Live Customizer — no coding required.

Choose from 15 fully responsive coming soon templates, each pre-designed with modern layouts and fully customizable through the Customizer. Add your own logo, background image, heading text, countdown timer, and social media links. Collect email subscribers with the built-in MailChimp integration so you can build your audience before launch day.

Logged-in users can browse and edit the site normally while non-logged-in visitors see only the coming soon or maintenance page. The plugin also blocks the WordPress REST API for visitors to prevent content exposure while your site is under construction.

Why Choose This Coming Soon Plugin?

100% free — no premium version, no ads, no feature restrictions
15 responsive templates — professionally designed coming soon, maintenance mode, and under construction page layouts
Live Customizer — customize everything in real time without touching code
Countdown timer — display a launch countdown with configurable date and 12/24-hour format
MailChimp subscribe form — collect emails and grow your list while in maintenance mode
Social media integration — add links to Facebook, Twitter, Instagram, YouTube, Pinterest, and email
Custom logo and background — upload your brand logo and a custom background image
Google Analytics 4 — track visitors to your coming soon page with GA4
Custom CSS — add your own styles for advanced customization
REST API protection — blocks public API access while the site is under construction
Developer friendly — use the ccsm_skip_redirect and ccsm_force_redirect filters to control redirect behavior
Works with all WordPress themes — self-contained templates run independently of your active theme
Privacy conscious — no tracking of its own. Note that enabling the optional Google Analytics field, and the Google Fonts each template loads, involve requests to Google, which you may need to disclose depending on your jurisdiction

How It Works

Install and activate the plugin
Go to Coming Soon (in the WordPress admin menu)
Pick a template and customize the content, colors, images, and countdown timer
Enable coming soon mode — visitors see your launch page, you keep working

Links

This plugin is developed and maintained by Colorlib. If you enjoy using it, please leave a review — it helps other WordPress users discover the plugin.

Screenshots

Template 1 — Split layout with subscribe form, countdown timer, and social media icons

Template 2 — Full-screen background with centered countdown timer and email subscribe form

Template 3 — Minimal card layout with flip-style countdown timer and subscribe form

Template 4 — Bold gradient background with countdown timer and call-to-action button

Template 5 — Vibrant gradient with top countdown timer and inline subscribe form

Template 6 — Full-screen background with countdown timer, newsletter form, and social icons

Template 7 — Purple overlay with subscribe form, countdown timer, and social media links

Template 8 — Dark purple background with centered countdown timer and email notification form

Template 9 — Fullscreen ocean background with large countdown timer and sign-up button

Template 10 — Dark elegant layout with side countdown timer, subscribe form, and social icons

Template 11 — Dramatic full-screen background with elegant countdown timer and sign-up button

Template 12 — Clean split layout with subscribe form and social media icons

Template 13 — Full-screen nature background with header countdown timer and sign-up button

Template 14 — Split layout with mountain background, subscribe form, and social links

Template 15 — City skyline with purple overlay, countdown timer, and social icons

Frequently Asked Questions

How do I enable or disable the coming soon page?

Go to Coming Soon (in the WordPress admin menu) > General and toggle the “Activate Coming Soon” option. You can also deactivate the plugin entirely under Plugins to disable the coming soon page.

Who can see the coming soon page?

Only visitors who are not logged in to WordPress will see the coming soon page. Logged-in administrators and editors can browse the site normally while working on it. The login page at wp-login.php is always accessible.

How do I change the coming soon page template?

Navigate to Coming Soon (in the WordPress admin menu) > Templates. You will see a visual preview of all 15 available templates. Click on the one you want to use and the preview will update immediately.

How do I set up the countdown timer?

Go to Coming Soon (in the WordPress admin menu) > General and enable “Activate Timer Countdown.” Then set your launch date and time using the date picker. The timer supports both 12-hour and 24-hour formats. Note that templates 12 and 14 do not display a countdown timer.

How do I connect MailChimp for email subscriptions?

Go to Coming Soon (in the WordPress admin menu) > Subscribe Form and paste your MailChimp signup form action URL. You can find this URL in your MailChimp account under Lists > Signup Forms > Embedded Forms. Copy the URL from the form’s action attribute.

Can I add social media links?

Yes. Go to Coming Soon (in the WordPress admin menu) > Social Links and enter your profile URLs for Facebook, Twitter, YouTube, Pinterest, Instagram, or an email address. Social links are supported on most templates (all except templates 2, 5, and 8).

Can I customize the logo and background image?

Yes. Under Coming Soon (in the WordPress admin menu) > General you can upload a custom logo image (recommended size: 80x80px) and a background image. Most templates support both options, though a few templates use fixed layouts without background images.

Can I add custom CSS to the coming soon page?

Yes. Go to Coming Soon (in the WordPress admin menu) > Custom CSS. This provides a code editor where you can add CSS that applies only to the coming soon page without affecting the rest of your site.

How do I add Google Analytics tracking?

Go to Coming Soon (in the WordPress admin menu) > General and enter your Google Analytics 4 measurement ID (e.g., G-XXXXXXXXXX) in the tracking code field.

Does the plugin work with caching plugins?

Most caching plugins will not interfere because the coming soon page is served via a template redirect before caching occurs. If you experience issues, exclude the front page from your caching plugin or clear the cache after enabling or disabling coming soon mode.

Can I allow specific pages to bypass the coming soon page?

Yes. Developers can use the ccsm_skip_redirect filter to allow specific pages or URLs to bypass the coming soon redirect. For example, you might want to keep a privacy policy page accessible.

Does the plugin block the REST API while in maintenance mode?

Yes. When coming soon mode is active, the plugin blocks REST API requests for non-logged-in users to prevent content exposure through endpoints like /wp-json/wp/v2/posts.

Is the plugin compatible with my theme?

Yes. The coming soon page uses its own self-contained templates with their own styles and scripts, so it works independently of your active WordPress theme.

What is the difference between coming soon mode and maintenance mode?

Both modes display a full-screen page to visitors and block access to the rest of your site. A coming soon page is typically used before a new website launches to build anticipation and collect emails. A maintenance mode page is used when an existing site is temporarily offline for updates. This plugin handles both scenarios with the same set of templates.

Can I use a countdown timer on the coming soon page?

Yes. The countdown timer can be enabled under Coming Soon (in the WordPress admin menu) > General. Set your launch date and time and the countdown will display days, hours, minutes, and seconds until your site goes live. Most templates support the countdown timer.

Is the plugin free to use?

Yes. Coming Soon & Maintenance Mode by Colorlib is completely free with no premium version, no ads, and no feature limitations. All 15 templates, the MailChimp integration, countdown timer, social media links, custom CSS, and Google Analytics tracking are included at no cost.

Does the coming soon page work on mobile devices?

Yes. All 15 coming soon page templates are fully responsive and work on desktops, tablets, and mobile phones. The layouts adapt automatically to different screen sizes.

Ratings & Reviews

Recent Reviews

Loading reviews…

View all reviews on WordPress.org (opens in a new tab)

Changelog

1.4.0 – 30.07.2026

Security: Fixed a leak where XML sitemaps served every post URL and author slug while the coming soon page was active
Security: Fixed a leak where /?p=123 style URLs answered with a redirect to the real permalink, exposing post slugs and usernames
Security: XML-RPC, wp-links-opml.php and other plugins’ logged-out admin-ajax handlers are now blocked while the site is closed
Security: Any logged-in user, including subscribers, could previously bypass the page; it now requires the edit_posts capability (filterable with ccsm_bypass_capability)
Security: Each setting is now sanitized for its own data type instead of sharing one HTML sanitizer
Security: Colors are validated as hex values before being printed into CSS
Security: Added direct-access guards to the 24 files that lacked them
New: Maintenance mode, which answers HTTP 503 with Retry-After so search engines treat downtime as temporary and your rankings survive
New: Optional noindex tag, plus automatic crawler blocking through robots.txt in maintenance mode
New: Shareable preview link that lets a client see the real site without an account
New: Export and import your settings as JSON
New: A real settings screen, reachable from the Coming Soon admin menu (the Customizer has no menu entry on block themes)
Improved: Per-page CSS dropped from about 93 KB to 19 KB; the utility stylesheet was 80 KB duplicated across all 15 templates and 99% unused
Improved: The front-end script no longer blocks rendering from the page head
Improved: The background image is preloaded, and six templates no longer make two Google Fonts requests where one will do
Improved: The coming soon page now sends no-cache headers, so page caches cannot keep serving it after you reopen the site
Fixed: Keyboard focus is visible again; every template removed the focus outline and replaced it with nothing
Fixed: Subscribe form errors are now announced and visible; the message previously appeared only on hover on wide screens
Fixed: Email validation never actually ran, so any non-empty text was accepted
Fixed: The subscribe modal now traps focus, restores it on close, and is announced as a dialog
Fixed: Every template now has a real heading, email fields use the email keyboard, and inputs have labels
Fixed: Template 4 showed the days value in the seconds slot of the countdown
Fixed: Template 10’s YouTube and Instagram links were prefixed with mailto:
Fixed: Template 3 hid the social links and footer whenever the subscribe form was turned off
Fixed: The Settings link on the Plugins screen returned a permissions error
Fixed: Opening the Coming Soon menu logged a PHP fatal error on every visit
Fixed: The Customizer live preview did nothing at all; colors, images, text and social links now update as you type
Fixed: The subscribe form no longer appears until you configure where it should submit
Improved: Text contrast raised to meet WCAG AA on placeholder and secondary text
Improved: Animations respect the reduced-motion system setting
Improved: Removed about 3 MB of unused files and switched translation building to WP-CLI

1.3.0 – 22.06.2026

Improved: Removed Bootstrap and jQuery from the front end — coming-soon pages are now framework-free and load dramatically faster
Improved: Replaced jQuery, Moment.js, FlipClock, Tilt and Bootstrap JS with a single ~6 KB dependency-free vanilla script
Improved: Replaced the Font Awesome and Material Design icon-font CDNs with inline SVG icons — no third-party requests and no more broken icons from the retired stackpath CDN
Improved: Dropped the Bootstrap CSS framework (122 KB); each template is fully self-contained
Improved: Removed ~2 MB of unused vendored libraries (Select2, Ionicons, Moment timezone database, duplicate/source-map files)
Improved: Google Fonts now load with preconnect and font-display: swap to prevent invisible-text flashes
Improved: Front-end assets are versioned so browser caches refresh correctly on updates
Fixed: Countdown timer used the daylight-saving flag instead of the minutes value when setting the target time
Fixed: Prevented a fatal error on PHP 8 when a malformed countdown date was stored

1.2.0 – 06.02.2026

Updated: Minimum PHP version raised to 7.4 (compatible up to PHP 8.5)
Updated: Minimum WordPress version raised to 6.0
Fixed: PHP 8.x strict type comparison warnings throughout
Fixed: Uninitialized variables causing PHP warnings
Fixed: Missing capability checks on AJAX handlers
Fixed: Input sanitization on superglobal access
Fixed: wp_enqueue_scripts() misuse (was using hook name as function)
Fixed: Trailing spaces in default settings array keys
Fixed: Missing return value in review check method
Fixed: Template path validation for security
Improved: Proper escaping of AJAX nonces in inline scripts
Improved: Uninstall cleanup now removes plugin options and transients
Improved: Updated Google Analytics placeholder to GA4 format

1.1.2 – 05.06.2025

Fixed: Textdomain fix for wordpress 6.8+

1.1.1 – 03.02.2025

Fixed: Overflowing text on template no.15 ( https://github.com/ColorlibHQ/colorlib-coming-soon-maintenence/issues/77 )
Fixed: Subscribe field is overlapped and social media icons are not arranged correctly on template no.14 ( https://github.com/ColorlibHQ/colorlib-coming-soon-maintenence/issues/75 )
Fixed: Close modal button not working on template no.4 ( https://github.com/ColorlibHQ/colorlib-coming-soon-maintenence/issues/68 )

1.1.0 – 21.03.2024

Fixed: XSS security

1.0.99 – 27.05.202

Fixed: XSS security

1.0.98 – 11.05.2021

Added : Social icons for template 3 ( https://github.com/ColorlibHQ/colorlib-coming-soon-maintenence/issues/78 )

1.0.97 – 08.04.2021

Fixed: Double dots on template 15 ( https://github.com/ColorlibHQ/colorlib-coming-soon-maintenence/issues/76 )

1.0.96

Compatibility with jQuery 3.0

1.0.95

Fixed SSL Verification

1.0.94

Fix timer fields width in FireFox
Some escaping improvements

1.0.93

Added option to add Google Analytics to landing page
Fix toggle button bug when using themes that change the layout of customizer controls
Review dismiss fix