Skip to content
OpenAdvisories
Unscored CVE-2023-2032 EUVD-2023-33559GHSA-mr4p-2m35-4m4g

Custom 404 Pro < 3.8.1 - Multiple SQL Injection

Published Jun 27, 2023 · Updated Nov 27, 2024 · Assigned by WPScan

Description

The Custom 404 Pro WordPress plugin before 3.8.1 does not properly sanitize database inputs, leading to multiple SQL Injection vulnerabilities.

Affected products

VendorProductAffectedFixed
— Custom 404 Pro < 3.8.1 3.8.1

References