Description
The Custom 404 Pro WordPress plugin before 3.8.1 does not properly sanitize database inputs, leading to multiple SQL Injection vulnerabilities.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Custom 404 Pro | < 3.8.1 | 3.8.1 |
References
- https://wpscan.com/vulnerability/17acde5d-44ea-4e77-8670-260d22e28ffe exploit vdb-entry technical-description