PLUGIN SECURITY
Is 404 Solution safe?
Automatically redirect 404 errors to the right page using a 7-engine matching pipeline and spell-checking algorithm. Zero configuration required.
What this plugin does
- Slug:
404-solution - Author: Aaron
- 10000+ active installs
- 98/100 rating (45 reviews on wordpress.org)
- 1207423 all-time downloads
- On WordPress.org since 2017-03-05
301 redirect404404 redirectredirectspell check
Maintenance status
- Latest known version: 4.3.2
- Last updated: 2026-11-09 9:29pm GMT
- Tested up to WordPress: 7.1.4
- Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
6 known CVEs on file for 404 Solution. Reported between 2023 and 2025.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-14477 | 404 Solution: Redirection and Page Suggestions [404-solution] < 3.1.1 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | Medium 4.9 | < 3.1.1 | 3.1.1 | 2025-12-12 | ✓ fixed in latest |
| CVE-2024-11277 | 404 Solution: Redirection and Page Suggestions [404-solution] < 2.35.20 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 2.35.20 | 2.35.20 | 2024-11-19 | ✓ fixed in latest |
| CVE-2024-11094 | 404 Solution: Redirection and Page Suggestions [404-solution] < 2.35.18 | Exposure of Data Element to Wrong Session | Medium 5.3 | < 2.35.18 | 2.35.18 | 2024-11-15 | ✓ fixed in latest |
| CVE-2024-1068 | 404 Solution: Redirection and Page Suggestions [404-solution] < 2.35.8 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | High 7.2 | < 2.35.8 | 2.35.8 | 2024-02-17 | ✓ fixed in latest |
| CVE-2023-52146 | 404 Solution: Redirection and Page Suggestions [404-solution] < 2.33.1 | Insertion of Sensitive Information into Log File | Medium 5.3 | < 2.33.1 | 2.33.1 | 2023-12-28 | ✓ fixed in latest |
| CVE-2023-50848 | 404 Solution: Redirection and Page Suggestions [404-solution] < 2.35.0 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | High 7.6 | < 2.35.0 | 2.35.0 | 2023-12-21 | ✓ fixed in latest |
| — | 404 Solution: Redirection and Page Suggestions [404-solution] < 2.34.0 | — | Unknown | < 2.34.0 | 2.34.0 | 2023-10-26 | ✓ fixed in latest |
| — | 404 Solution: Redirection and Page Suggestions [404-solution] < 2.34.0 | — | Unknown | < 2.34.0 | 2.34.0 | 2023-10-23 | ✓ fixed in latest |
+ 3 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| — | 404 Solution: Redirection and Page Suggestions [404-solution] < 2.33.1 | — | Unknown | < 2.33.1 | 2.33.1 | 2023-10-16 | ✓ fixed in latest |
| — | 404 Solution: Redirection and Page Suggestions [404-solution] < 2.33.1 | — | Unknown | < 2.33.1 | 2.33.1 | — | ✓ fixed in latest |
| — | 404 Solution < 2.33.1 - Sensitive Information Exposure | — | Unknown | < 2.33.1 | 2.33.1 | — | ✓ fixed in latest |
How to fix it
Keep 404 Solution updated — 4.3.2 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Redirection — 2000000+ active installs — 88/100 (705) — max PHP 8.4
- 301 Redirects – Redirect Manager — 300000+ active installs — 94/100 (579) — max PHP 8.4
- Broken Link Checker by AIOSEO – Find & Fix Broken Internal, External & Video Links — 200000+ active installs — 76/100 (87) — max PHP 8.4
- Simple 301 Redirects by BetterLinks – Easy Redirect Manager — 100000+ active installs — 78/100 (161) — max PHP 8.4
- 404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring — 100000+ active installs — 94/100 (321) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.