Redirect 404 Error Page to Homepage or Custom Page with Logs
Redirect 404 Error Page to Homepage or Custom Page with Logs has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2023; all 3 are fixed as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2023 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, SQL Injection.
Every one of the 3 issues recorded for Redirect 404 Error Page to Homepage or Custom Page with Logs has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, one record each. Redirect 404 Error Page to Homepage or Custom Page with Logs is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2023-47530Redirect 404 Error Page to Homepage or Custom Page with Logs <= 1.8.7 - Authenticated (Administrator+) SQL Injection
Read the full analysisVulnerability Records
Redirect 404 Error Page to Homepage or Custom Page with Logs
Author
WPVibes
Easily redirect WordPress 404 error pages to the homepage or any other page. The plugin supports permanent redirects (HTTP response status code 301) and temporary redirects (HTTP response status code 302). The plugin will redirect 404 error pages to the homepage when you activate it by using the 301 permanent redirects. To configure it open Dashboard >> Settings >> General Settings and scroll down to the bottom. Note Permalinks have to be enabled in Dashboard >> Settings >> Permalinks in order for the 404 Redirect to work properly. New Feature 404 errors can be logged with this plugin so you can examine what pages may be missing. Redirect 404 Error Page is very useful for themes with an ugly, uninformative 404 server error page that can’t be changed without missing code and set to still return 404. Simply create a new custom 404 error page and activate the plugin – problem solved! It’s also beneficial in situations when a lot of content has been removed from the site. For those situations, create a new page explaining what happened and simply configure Redirect 404 to use that page. It is an ideal plugin for missing page redirection.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C