Skip to content
Noroxi

Custom 404 Pro

custom-404-pro · plugin

Known security vulnerabilities for Custom 404 Pro. Find out in seconds which version runs on your site with WP Lens.

9 known vulnerabilities

2 with public exploit code · latest Dec 22, 2025

Vulnerabilities

  • CVE-2022-47605

    WordPress Custom 404 Pro Plugin <= 3.7.0 is vulnerable to SQL Injection (SQLi)

    High 7.2

  • CVE-2024-39646

    WordPress Custom 404 Pro plugin <= 3.11.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Medium 6.1

  • CVE-2023-51540

    WordPress Custom 404 Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)

    Medium 6.1

  • CVE-2023-32740

    WordPress Custom 404 Pro Plugin <= 3.8.1 is vulnerable to Cross Site Scripting (XSS)

    Medium 6.1

  • CVE-2019-15838

    The custom-404-pro plugin before 3.2.8 for WordPress has reflected XSS, a different vulnerability than CVE-2019-14789.

    Medium 6.1

  • CVE-2019-14789

    The Custom 404 Pro plugin 3.2.8 for WordPress has XSS via the wp-admin/admin.php?page=c4p-main page parameter.

    Medium 6.1

  • CVE-2025-9947

    Custom 404 Pro <= 3.12.0 - Authenticated (Administrator+) SQL Injection via `path` Parameter

    Medium 4.9

  • CVE-2025-62880

    WordPress Custom 404 Pro plugin <= 3.12.0 - Cross Site Request Forgery (CSRF) vulnerability

    Medium 4.3

  • CVE-2023-0385

    Custom 404 Pro <= 3.7.1 - Cross-Site Request Forgery

    Medium 4.3

← Back to directory