Kunalnagar

10 CVEs across 2 Kunalnagar products. Browse Kunalnagar vulnerabilities, severities, and proof-of-concept exploits.

Kunalnagar products with known CVEs

ProductCVEs
Custom 404 Pro9
Custom 404 Pro2
Kunalnagar CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-9947Medium4.92025-10-11The Custom 404 Pro plugin for WordPress is vulnerable to time-based SQL Injection via the ‘path’ parameter in all versions up to, and including, 3.12.0 due to…
CVE-2024-39646High7.12024-08-01Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kunal Custom 404 Pro custom-404-pro.This issue affects Cu…
CVE-2023-51540High7.12024-02-01Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kunal Nagar Custom 404 Pro allows Stored XSS.This issue a…
CVE-2023-32740Medium5.82023-08-30Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kunal Nagar Custom 404 Pro plugin <= 3.8.1 versions.
CVE-2023-2032Critical9.82023-06-27The Custom 404 Pro WordPress plugin before 3.8.1 does not properly sanitize database inputs, leading to multiple SQL Injection vulnerabilities.
CVE-2023-2023Medium6.12023-05-30The Custom 404 Pro WordPress plugin before 3.7.3 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting.
CVE-2022-47605Medium6.42023-04-12Auth. SQL Injection') vulnerability in Kunal Nagar Custom 404 Pro plugin <= 3.7.0 versions.
CVE-2023-0385Medium4.32023-01-18The Custom 404 Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.7.1. This is due to missing or incorrec…
CVE-2019-15838Medium6.12019-08-30The custom-404-pro plugin before 3.2.8 for WordPress has reflected XSS, a different vulnerability than CVE-2019-14789.
CVE-2019-14789Medium6.12019-08-15The Custom 404 Pro plugin 3.2.8 for WordPress has XSS via the wp-admin/admin.php?page=c4p-main page parameter.