Custom 404 Pro

Vulnerabilities 15Slug custom-404-proLatest version 3.15.0WordPress.org →

Minimum safe version

3.12.1

Update to 3.12.1 or later to address 14 fixable vulnerabilities

Latest available3.15.0 ✓⚠ 1 vulnerability has no fix

N/A

2025-12-22< 3.12.1

CVE-2025-62880

CVE Wordfence

Medium 4.9 Unfixed

2025-10-13≤ 3.12.0

WordPress Custom 404 Pro Plugin <= 3.12.0 is vulnerable to SQL Injection

Patchstack EUVD Wordfence CVE

High 7.1

2024-08-01< 3.11.2

CVE-2024-39646

CVE Patchstack Wordfence

High 7.1

2024-12-27< 3.10.1

WordPress Custom 404 Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)

Patchstack CVE Wordfence WPScan

N/A

2023-04-25< 3.7.3

Custom 404 Pro <= 3.7.2 - Unauthenticated SQL Injection

Wordfence

Critical 9.8

2023-06-27< 3.8.1

CVE-2023-2032

CVE Patchstack Wordfence WPScan

Medium 5.8

2023-08-30< 3.8.2

CVE-2023-32740

CVE Patchstack Wordfence WPScan

Medium 6.1

2023-05-30< 3.7.3

CVE-2023-2023

CVE Patchstack Wordfence WPScan

N/A

2023-04-25< 3.7.3

WordPress Custom 404 Pro Plugin <= 3.7.2 is vulnerable to SQL Injection

Patchstack

High 8.3

2023-04-12< 3.7.1

CVE-2022-47605

CVE Patchstack WPScan

Medium 4.3

2023-01-18< 3.7.2

CVE-2023-0385

CVE Wordfence Patchstack WPScan

N/A

2023-01-13< 3.7.1

Custom 404 Pro <= 3.7.0 - Authenticated (Administrator+) SQL Injection

Wordfence

N/A

2019-06-25< 3.2.8

WordPress Custom 404 Pro plugin <= 3.2.7 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Patchstack

Medium 6.1

2019-08-15< 3.2.9

CVE-2019-14789

CVE Wordfence WPScan

Medium 6.1

2019-08-30< 3.2.8

CVE-2019-15838

CVE Wordfence WPScan