Skip to content
OpenAdvisories

Vendor

kunalnagar

2 known vulnerabilities.

Products

Custom 404 Pro 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.9
    CVE-2025-9947

    Custom 404 Pro <= 3.12.0 - Authenticated (Administrator+) SQL Injection via `path` Parameter

    The Custom 404 Pro plugin for WordPress is vulnerable to time-based SQL Injection via the ‘path’ parameter in all versions up to, and including, 3.12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exist…

    kunalnagar Custom 404 Pro Web / CMS
  • Medium 4.3
    CVE-2023-0385

    Custom 404 Pro <= 3.7.1 - Cross-Site Request Forgery

    The Custom 404 Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.7.1. This is due to missing or incorrect nonce validation on the custom_404_pro_admin_init function. This makes it possible for unauthentic…

    kunalnagar Custom 404 Pro Web / CMS