kunalnagar custom 404 pro vulnerabilities and exploits

(subscribe to this query)

6.1

CVSSv3

The custom-404-pro plugin prior to 3.2.8 for WordPress has reflected XSS, a different vulnerability than CVE-2019-14789.

Kunalnagar Custom 404 Pro

7.2

CVSSv3

Auth. SQL Injection') vulnerability in Kunal Nagar Custom 404 Pro plugin <= 3.7.0 versions.

Kunalnagar Custom 404 Pro

4.3

CVSSv3

The Custom 404 Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.7.1. This is due to missing or incorrect nonce validation on the custom_404_pro_admin_init function. This makes it possible for unauthenticated malicious users ...

Kunalnagar Custom 404 Pro

6.1

CVSSv3

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kunal Nagar Custom 404 Pro allows Stored XSS.This issue affects Custom 404 Pro: from n/a up to and including 3.10.0.

Kunalnagar Custom 404 Pro

6.1

CVSSv3

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kunal Nagar Custom 404 Pro plugin <= 3.8.1 versions.

Kunalnagar Custom 404 Pro

6.1

CVSSv3

The Custom 404 Pro WordPress plugin prior to 3.7.3 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting.

Kunalnagar Custom 404 Pro

1 Github repository

9.8

CVSSv3

The Custom 404 Pro WordPress plugin prior to 3.8.1 does not properly sanitize database inputs, leading to multiple SQL Injection vulnerabilities.

Kunalnagar Custom 404 Pro

6.1

CVSSv3

The Custom 404 Pro plugin 3.2.8 for WordPress has XSS via the wp-admin/admin.php?page=c4p-main page parameter.

Kunalnagar Custom 404 Pro 3.2.8

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook