WordPress Plugin Vulnerabilities

Custom 404 Pro < 3.2.8 - XSS

Description

The Custom 404 Pro WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
custom-404-pro
Fixed in 3.2.8

References

CVE
CVE-2019-15838

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
617ec72b-124b-4612-97a7-d69a29892338

Timeline

Publicly Published
2019-06-24 (about 6 years ago)
Added
2019-08-30 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2022-05-02
Title
WP Meta SEO < 4.4.7 - Admin+ Stored Cross-Site Scripting via breadcrumbs
Published
2023-02-21
Title
Старт < 3.8 - Admin+ Stored XSS
Published
2015-05-05
Title
WordPress 4.1-4.2.1 - Unauthenticated Genericons Cross-Site Scripting (XSS)
Published
2025-09-19
Title
Author: Munzir <= 0.9 - Reflected Cross-Site Scripting
Published
2024-04-16
Title
HT Mega < 2.4.7 - Contributor+ Stored XSS via size