Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:custom_404_pro:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductCustom 404 Pro (b83af6ab-dc59-5606-84f1-d091cf96c7d7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-2032 vulnerable 2026-06-08 06:02:41.284130 Custom 404 Pro < 3.8.1 - Multiple SQL Injection
The Custom 404 Pro WordPress plugin before 3.8.1 does not properly sanitize database inputs, leading to multiple SQL Injection vulnerabilities.
Published: 2023-06-27T13:17:14.009Z
Updated: 2024-11-27T19:39:19.913Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2023 vulnerable 2026-06-08 06:02:41.265578 Custom 404 Pro < 3.7.3 - Reflected Cross-Site Scripting
The Custom 404 Pro WordPress plugin before 3.7.3 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting.
Published: 2023-05-30T07:49:21.025Z
Updated: 2025-01-09T18:53:08.268Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.