CVE-2019-15838

The CVE-2019-15838 entry concerns the WordPress plugin custom-404-pro prior to version 3.2.8, where reflected XSS affects user input, per multiple sources (NVD, Red Hat, CNVD/PRION references). Remediation shown in related documents is to update to version 3.2.8 or later. The vulnerability is spe...

PT-2019-14427 · WordPress · Custom 404 Pro

Name of the Vulnerable Software and Affected Versions: custom-404-pro plugin versions prior to 3.2.8 Description: The issue is related to reflected XSS. Recommendations: For versions prior to 3.2.8, update to version 3.2.8 or later to resolve the issue...

WordPress Custom 404 Pro Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Custom 404 Pro is a 404 page customization plugin used in it. WordPress Custom 404 Pro plugin version 3.2.8 cross-site scripting...

CVE-2019-14789

The Custom 404 Pro plugin 3.2.8 for WordPress has XSS via the wp-admin/admin.php?page=c4p-main page parameter...

CVE-2019-14789

The Custom 404 Pro plugin 3.2.8 for WordPress has XSS via the wp-admin/admin.php?page=c4p-main page parameter...

Code injection

The Custom 404 Pro plugin 3.2.8 for WordPress has XSS via the wp-admin/admin.php?page=c4p-main page parameter...

CVE-2019-14789

The Custom 404 Pro plugin 3.2.8 for WordPress has XSS via the wp-admin/admin.php?page=c4p-main page parameter...

CVE-2019-14789

The CVE-2019-14789 entry concerns the Custom 404 Pro WordPress plugin prior to 3.2.8, with a cross-site scripting vulnerability reported via the wp-admin/admin.php?page=c4p-main parameter. Nuclei templates describe an XSS via the title parameter in Custom 404 Pro

PT-2019-13834 · WordPress · Custom 404 Pro

Name of the Vulnerable Software and Affected Versions: Custom 404 Pro plugin version 3.2.8 Description: The issue concerns a problem with the Custom 404 Pro plugin for WordPress, where there is an XSS issue via the "page" parameter in the wp-admin/admin.php page. Recommendations: For Custom 404 P...

WordPress Custom 404 Pro plugin <= 3.2.7 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated Reflected Cross-Site Scripting XSS vulnerability found in WordPress Custom 404 Pro plugin versions = 3.2.7. Solution Update the WordPress Custom 404 Pro plugin to the latest available version at least 3.2.8...

Custom 404 Pro < 3.2.9 - Authenticated Reflected XSS

The Custom 404 Pro WordPress plugin was affected by an Authenticated Reflected XSS security vulnerability. PoC Version...

Custom 404 Pro < 3.2.9 - Authenticated Reflected XSS

The Custom 404 Pro WordPress plugin was affected by an Authenticated Reflected XSS security vulnerability. Version...