CVE-2022-47605: WordPress Custom 404 Pro plugin <= 3.7.0 - Admin+ SQL Injection Vulnerability - Patchstack

Solution

Update the WordPress Custom 404 Pro plugin to the latest available version (at least 3.7.1).

Found this useful? Thank minhtuanact for reporting this vulnerability. Buy a coffee ☕

minhtuanact discovered and reported this SQL Injection vulnerability in WordPress Custom 404 Pro Plugin. This could allow a malicious actor to directly interact with your database, including but not limited to stealing information. This vulnerability has been fixed in version 3.7.1.

2 other known vulnerabilities for this pluginTo plugin page

Report to Patchstack Alliance bounty platform and earn monthly cash prizes.

Learn more