What this plugin does

• Slug: 404-to-301
• Author: Syed Balkhi
• 100000+ active installs
• 94/100 rating (311 reviews on wordpress.org)
• 2219917 all-time downloads
• On WordPress.org since 2014-07-24

404404 error logsredirectredirect managerredirection

Maintenance status

• Latest known version: 4.0.2
• Last updated: 2026-06-22 8:37pm GMT
• Tested up to WordPress: 7.0.4
• Requires PHP: 7.4+
• Max supported PHP (analyzed): 8.4

Known vulnerabilities

4 known CVEs on file for 404 To 301. Reported between 2015 and 2023.

+ 14 more known vulnerabilities

CVE	Vulnerability	Type	Severity	Affected	Fixed in	Published	Status
—	404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring [404-to-301] < 2.2.9	—	Unknown	< 2.2.9	2.2.9	2016-11-08	✓ fixed in latest
—	404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring [404-to-301] < 2.3.3	—	Unknown	< 2.3.3	2.3.3	2016-09-06	✓ fixed in latest
—	404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring [404-to-301] < 2.3.1	—	Unknown	< 2.3.1	2.3.1	2016-08-27	✓ fixed in latest
—	404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring [404-to-301] < 2.3.1	—	Unknown	< 2.3.1	2.3.1	2016-08-27	✓ fixed in latest
CVE-2015-9323	404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring [404-to-301] < 2.0.3	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')	Critical 9.8	< 2.0.3	2.0.3	2015-08-20	✓ fixed in latest
—	404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring [404-to-301] < 2.0.3	—	Unknown	< 2.0.3	2.0.3	2015-08-20	✓ fixed in latest
—	404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring [404-to-301] < 3.1.2	—	Unknown	< 3.1.2	3.1.2	—	✓ fixed in latest
—	404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring [404-to-301] < 3.0.2	—	Unknown	< 3.0.2	3.0.2	—	✓ fixed in latest
—	404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring [404-to-301] < 3.0.8	—	Unknown	< 3.0.8	3.0.8	—	✓ fixed in latest
—	404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring [404-to-301] < 2.3.1	—	Unknown	< 2.3.1	2.3.1	—	✓ fixed in latest
—	404 to 301 <= 2.3.0 - Unauthenticated Stored Cross-Site Scripting (XSS)	—	Unknown	< 2.3.1	2.3.1	—	✓ fixed in latest
—	Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update	—	Unknown	< 3.0.2	3.0.2	—	✓ fixed in latest
CVE-2021-4338	404 to 301 < 3.0.8 - Broken Access Control	—	Unknown	< 3.0.8	3.0.8	—	✓ fixed in latest
—	404 to 301 < 3.1.2 - Reflected Cross-Site Scripting	—	Unknown	< 3.1.2	3.1.2	—	✓ fixed in latest

How to fix it

Keep 404 To 301 updated — 4.0.2 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

• Redirection — 2000000+ active installs — 88/100 (702) — max PHP 8.4
• Broken Link Checker by AIOSEO – Find & Fix Broken Internal, External & Video Links — 300000+ active installs — 78/100 (83) — max PHP 8.4
• Smart Custom 404 Error Page — 100000+ active installs — 98/100 (1196) — max PHP 8.4
• Redirection — 100000+ active installs — 100/100 (409) — max PHP 8.4
• WP 404 Auto Redirect to Similar Post — 30000+ active installs — 98/100 (113) — max PHP 8.4