What this plugin does

• Slug: 404-to-301
• Author: Syed Balkhi
• 100000+ active installs
• 94/100 rating (311 reviews on wordpress.org)
• 2307344 all-time downloads
• On WordPress.org since 2014-07-24

301 redirect404 monitorbroken linksredirect managerredirection

Maintenance status

• Latest known version: 4.0.2
• Last updated: 2026-08-31 11:35am GMT
• Tested up to WordPress: 7.1
• Requires PHP: 7.4+
• Max supported PHP (analyzed): 8.4

Known vulnerabilities

4 known CVEs on file for 404 To 301. Reported between 2015 and 2023.

+ 14 more known vulnerabilities

CVE	Vulnerability	Type	Severity	Affected	Fixed in	Published	Status
—	404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring [404-to-301] < 2.2.9	—	Unknown	< 2.2.9	2.2.9	2016-11-08	✓ fixed in latest
—	404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring [404-to-301] < 2.3.3	—	Unknown	< 2.3.3	2.3.3	2016-09-06	✓ fixed in latest
—	404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring [404-to-301] < 2.3.1	—	Unknown	< 2.3.1	2.3.1	2016-08-27	✓ fixed in latest
—	404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring [404-to-301] < 2.3.1	—	Unknown	< 2.3.1	2.3.1	2016-08-27	✓ fixed in latest
CVE-2015-9323	404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring [404-to-301] < 2.0.3	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')	Critical 9.8	< 2.0.3	2.0.3	2015-08-20	✓ fixed in latest
—	404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring [404-to-301] < 2.0.3	—	Unknown	< 2.0.3	2.0.3	2015-08-20	✓ fixed in latest
—	404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring [404-to-301] < 3.1.2	—	Unknown	< 3.1.2	3.1.2	—	✓ fixed in latest
—	404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring [404-to-301] < 3.0.2	—	Unknown	< 3.0.2	3.0.2	—	✓ fixed in latest
—	404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring [404-to-301] < 3.0.8	—	Unknown	< 3.0.8	3.0.8	—	✓ fixed in latest
—	404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring [404-to-301] < 2.3.1	—	Unknown	< 2.3.1	2.3.1	—	✓ fixed in latest
—	404 to 301 <= 2.3.0 - Unauthenticated Stored Cross-Site Scripting (XSS)	—	Unknown	< 2.3.1	2.3.1	—	✓ fixed in latest
—	Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update	—	Unknown	< 3.0.2	3.0.2	—	✓ fixed in latest
CVE-2021-4338	404 to 301 < 3.0.8 - Broken Access Control	—	Unknown	< 3.0.8	3.0.8	—	✓ fixed in latest
—	404 to 301 < 3.1.2 - Reflected Cross-Site Scripting	—	Unknown	< 3.1.2	3.1.2	—	✓ fixed in latest

How to fix it

Keep 404 To 301 updated — 4.0.2 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

• 301 Redirects – Redirect Manager — 300000+ active installs — 94/100 (578) — max PHP 8.4
• Simple 301 Redirects By BetterLinks – Easy WordPress Redirect Manager for Redirects, 404 Error Log & More — 100000+ active installs — 76/100 (162) — max PHP 8.4
• 301 Redirects & 404 Error Log — 30000+ active installs — 92/100 (28) — max PHP 8.4
• SEO Redirection Plugin – 301 Redirect Manager — 10000+ active installs — 86/100 (73) — max PHP <8.0
• Advanced 301 and 302 Redirect — 1000+ active installs — 100/100 (6)