PLUGIN SECURITY

Is 404page safe?

Create a custom 404 error page the easy way! No coding, and no redirects.

What this plugin does

  • Slug: 404page
  • Author: NerdPress
  • 100000+ active installs
  • 98/100 rating (1196 reviews on wordpress.org)
  • 2735299 all-time downloads
  • On WordPress.org since 2013-09-30

404404 error404 pagecustom 404not found

Maintenance status

  • Latest known version: 11.4.8
  • Last updated: 2026-05-21 5:26pm GMT
  • Tested up to WordPress: 7.0.4
  • Requires PHP: 5.4+
  • Max supported PHP (analyzed): 8.4

Known vulnerabilities

1 known CVE on file for 404page. Reported between 2024 and 2024.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-9204 Smart Custom 404 Error Page [404page] < 11.4.8 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 6.1 < 11.4.8 11.4.8 2024-10-03 ✓ fixed in latest

How to fix it

Keep 404page updated — 11.4.8 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.