CVE-2023-2032

Custom 404 Pro < 3.8.1 - Multiple SQL Injection

The Custom 404 Pro WordPress plugin before 3.8.1 does not properly sanitize database inputs, leading to multiple SQL Injection vulnerabilities.

Affected

Custom 404 Pro

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.93% chance of exploitation in the next 30 days, 60th percentile

Published

2023-06-27

Updated

2024-11-27

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/17acde5d-44ea-4e77-8670-260d22e28ffe

References

• CVE Record
• NVD entry