https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-39646.htmlhttps://patchthecve.com/cve/CVE-2024-39646.htmlWed, 17 Jun 2026 07:42:23 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kunal Custom 404 Pro custom-404-pro.This issue affects Custom 404 Pro: from n/a through <= 3.11.1.https://patchthecve.com/cve/CVE-2023-51540.htmlhttps://patchthecve.com/cve/CVE-2023-51540.htmlWed, 17 Jun 2026 06:41:10 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kunal Nagar Custom 404 Pro allows Stored XSS.This issue affects Custom 404 Pro: from n/a through 3.10.0.https://patchthecve.com/cve/CVE-2023-32740.htmlhttps://patchthecve.com/cve/CVE-2023-32740.htmlWed, 17 Jun 2026 05:59:29 +0000MEDIUM 5.8: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kunal Nagar Custom 404 Pro plugin <= 3.8.1 versions.https://patchthecve.com/cve/CVE-2023-2032.htmlhttps://patchthecve.com/cve/CVE-2023-2032.htmlWed, 17 Jun 2026 05:51:14 +0000CRITICAL 9.8: The Custom 404 Pro WordPress plugin before 3.8.1 does not properly sanitize database inputs, leading to multiple SQL Injection vulnerabilities.https://patchthecve.com/cve/CVE-2023-2023.htmlhttps://patchthecve.com/cve/CVE-2023-2023.htmlWed, 17 Jun 2026 05:51:13 +0000MEDIUM 6.1: The Custom 404 Pro WordPress plugin before 3.7.3 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting.