Kunal Nagar Custom 404 Pro

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs

Custom 404 Pro < 3.8.1 - Multiple SQL Injection

Published 2023-06-27 · Modified

9.8EPSS 0.009

WordPress Custom 404 Pro Plugin <= 3.7.0 is vulnerable to SQL Injection (SQLi)

Published 2023-04-12 · Modified

7.2EPSS 0.007

WordPress Custom 404 Pro plugin <= 3.11.1 - Reflected Cross Site Scripting (XSS) vulnerability

Published 2024-08-01 · Modified

7.1EPSS 0.006

WordPress Custom 404 Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)

Published 2024-02-01 · Modified

7.1EPSS 0.004

Custom 404 Pro < 3.7.3 - Reflected Cross-Site Scripting

Published 2023-05-30 · Modified

6.1EPSS 0.017

The Custom 404 Pro plugin 3.2.8 for WordPress has XSS via the wp-admin/admin.php?page=c4p-main page parameter.

Published 2019-08-15 · Modified

6.1EPSS 0.016

The custom-404-pro plugin before 3.2.8 for WordPress has reflected XSS, a different vulnerability than CVE-2019-14789.

Published 2019-08-30 · Modified

6.1EPSS 0.010

WordPress Custom 404 Pro Plugin <= 3.8.1 is vulnerable to Cross Site Scripting (XSS)

Published 2023-08-30 · Modified

6.1EPSS 0.003

Custom 404 Pro <= 3.7.1 - Cross-Site Request Forgery

Published 2023-01-18 · Modified

4.3EPSS 0.003