Custom 404 Pro

WordPress plugin · custom-404-pro · WordPress.org ↗

Latest v3.16.0 Last release Aug 30, 2026 Tested up to WP 7.1.1 7,000+ active installs

Critical

High

Known total

Unfixed

Running Custom 404 Pro on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
CRITICAL CVSS 9.8	Custom 404 Pro [custom-404-pro] < 3.8.1 WPVulnerability · PoC available	< 3.8.1	v3.8.1	CVE-2023-2032	Apr 25, 2023
HIGH CVSS 7.1	Custom 404 Pro [custom-404-pro] < 3.11.2 WPVulnerability	< 3.11.2	v3.11.2	CVE-2024-39646	Aug 1, 2024
HIGH CVSS 7.1	Custom 404 Pro [custom-404-pro] < 3.10.1 WPVulnerability	< 3.10.1	v3.10.1	CVE-2023-51540	Dec 27, 2023
HIGH CVSS 8.3	Custom 404 Pro [custom-404-pro] < 3.7.1 WPVulnerability	< 3.7.1	v3.7.1	CVE-2022-47605	Jan 13, 2023
MEDIUM CVSS 4.9	Custom 404 Pro [custom-404-pro] <= 3.12.0 (unfixed) WPVulnerability	<= 3.12.0	unfixed	CVE-2025-9947	Oct 10, 2025
MEDIUM CVSS 5.8	Custom 404 Pro [custom-404-pro] < 3.8.2 WPVulnerability	< 3.8.2	v3.8.2	CVE-2023-32740	May 15, 2023
MEDIUM CVSS 6.1	Custom 404 Pro [custom-404-pro] < 3.7.3 WPVulnerability · PoC available	< 3.7.3	v3.7.3	CVE-2023-2023	May 2, 2023
MEDIUM CVSS 4.3	Custom 404 Pro [custom-404-pro] < 3.7.2 WPVulnerability	< 3.7.2	v3.7.2	CVE-2023-0385	Jan 18, 2023
MEDIUM CVSS 6.1	Custom 404 Pro [custom-404-pro] < 3.2.9 WPVulnerability	< 3.2.9	v3.2.9	CVE-2019-14789	Jun 25, 2019
MEDIUM CVSS 6.1	Custom 404 Pro [custom-404-pro] < 3.2.8 WPVulnerability	< 3.2.8	v3.2.8	CVE-2019-15838	Jun 24, 2019
NONE CVSS 0.0	Custom 404 Pro [custom-404-pro] < 3.12.1 WPVulnerability	< 3.12.1	v3.12.1	CVE-2025-62880	May 13, 2025
UNKNOWN	Custom 404 Pro [custom-404-pro] < 3.7.3 WPVulnerability	< 3.7.3	v3.7.3	—	Apr 25, 2023
UNKNOWN	Custom 404 Pro [custom-404-pro] < 3.7.3 WPVulnerability	< 3.7.3	v3.7.3	—	Apr 25, 2023
UNKNOWN	Custom 404 Pro [custom-404-pro] < 3.2.8 WPVulnerability	< 3.2.8	v3.2.8	—	Jun 25, 2019

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.