Custom 404 Pro

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 50% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

1. ★★★★★ india245

   3.2y ago

   Thank you so much for this brilliant plugin. I am not technically confident, cannot do much by way of coding and get overwhelmed with geek speak. I downloaded this plugin after trying (and failing with) another, and within 10 minutes had my custom 404 page up and running. This has saved me time, energy and stress. Thank you so much. I have just donated something small too to support you in your work and creativity.

   Read on wp.org ↗
2. ★★★★★ Молвинец «СКРЕПЫ» NSFW Cartel

   4.1y ago

   На мой взгляд, это лучшее и простое дополнение для перенаправления! Перенаправляет даже с «закрытой страницы» ?author=1 что другие подобные дополнения делать не могут. Молодец.

   Read on wp.org ↗
3. ★★★★★ chorvaqueen

   6.5y ago

   ignore this, wrong plugin.

   Read on wp.org ↗
4. ★★★★★ ericsharp79

   7.6y ago

   This plugin was working great for us until we adjust the settings to start logging the 404 pages. Then, the custom page we selected in WordPress for the 404 to route to stops working. Is this a known bug?

   Read on wp.org ↗
5. ★★★★★ samenezes

   7.8y ago

   Works simple and fine! Congratulations!

   Read on wp.org ↗
6. ★★★★★ Dinuka

   8.4y ago

   Gets the job done in seconds. Super easy to use!

   Read on wp.org ↗
7. ★★★★★ Michael Sutter

   8.7y ago

   The plugin just does its job perfectly – highly recommend it!

   Read on wp.org ↗
8. ★★★★★ protoalaska

   8.7y ago

   Works great!

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.15.1 Confirm compatibility with WordPress 7.0 3.15.1
2. — Version 3.15.0 Add full translation support: all user-facing strings are now wrapped in i18n functions and a .pot template is shipped with the plugin. Includes a CI job to validate .po files contributed by community translators. 3.15.0
3. — Version 3.14.1 Fix page redirect using stale post GUID instead of current permalink, causing silent redirect failures on sites with changed domains, HTTP → HTTPS migrations, or staging-to-production deployments 3.14.1
4. — Version 3.14.0 Add configurable log retention policy: cap by row count, by age (days), or both. Includes a daily WP-Cron cleanup job and an on-demand Prune Logs Now button on the Logs page. 3.14.0
5. — Version 3.13.0 Add configurable email notification cooldown to prevent inbox flooding on high 404 traffic (15 min / 30 min / 1 hr / 6 hr / 24 hr) 3.13.0
6. — Version 3.12.9 Migrate plugin settings from a custom database table to native wp_options for better compatibility and performance 3.12.9

12 disclosed vulnerabilities on record for this plugin, 1 still affects the current version.

1. Medium · 4.9 Custom 404 Pro <= 3.12.0 - Authenticated (Administrator+) SQL Injection via `path` Parameter ↗
   2025-10-10 CVE-2025-9947 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.12.0 No patch available
2. Medium · 4.3 Custom 404 Pro <= 3.12.0 - Cross-Site Request Forgery ↗
   2025-05-13 CVE-2025-62880 Cross-Site Request Forgery (CSRF) Affects <= 3.12.0 Patched in 3.12.1
3. Medium · 6.1 Custom 404 Pro <= 3.11.1 - Reflected Cross-Site Scripting ↗
   2024-08-01 CVE-2024-39646 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.11.1 Patched in 3.11.2
4. High · 7.2 Custom 404 Pro <= 3.10.0 - Unauthenticated Stored Cross-Site Scripting via logging ↗
   2023-12-27 CVE-2023-51540 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.10.0 Patched in 3.10.1
5. Medium · 6.1 Custom 404 Pro <= 3.8.1 - Reflected Cross-Site Scripting via 'page' ↗
   2023-05-15 CVE-2023-32740 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.8.1 Patched in 3.8.2
6. Medium · 6.1 Custom 404 Pro <= 3.7.2 - Reflected Cross-Site Scripting via 's' ↗
   2023-05-02 CVE-2023-2023 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.7.2 Patched in 3.7.3
7. Critical · 9.8 Custom 404 Pro <= 3.7.2 - Unauthenticated SQL Injection ↗
   2023-04-25 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 3.7.3 Patched in 3.7.3
8. Critical · 9.8 Custom 404 Pro <= 3.8.0 - Unauthenticated SQL Injection via 's' ↗
   2023-04-25 CVE-2023-2032 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.8.0 Patched in 3.8.1
9. Medium · 4.3 Custom 404 Pro <= 3.7.1 - Cross-Site Request Forgery ↗
   2023-01-18 CVE-2023-0385 Cross-Site Request Forgery (CSRF) Affects <= 3.7.1 Patched in 3.7.2
10. High · 7.2 Custom 404 Pro <= 3.7.0 - Authenticated (Administrator+) SQL Injection ↗
    2023-01-13 CVE-2022-47605 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.7.0 Patched in 3.7.1
11. Medium · 6.1 Custom 404 Pro <= 3.2.8 - Reflected Cross-Site Scripting ↗
    2019-06-25 CVE-2019-14789 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 3.2.9 Patched in 3.2.9
12. Medium · 6.1 Custom 404 Pro <= 3.2.7 - Reflected Cross-Site Scripting ↗
    2019-06-24 CVE-2019-15838 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 3.2.8 Patched in 3.2.8

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-04-09 9K+ → 7K+ down after 286 days in tier
2. 2025-06-27 10K+ → 9K+ down after 1 days in tier
3. 2025-06-26 9K+ → 10K+ up after 3 days in tier
4. 2025-06-23 10K+ → 9K+ down after 3 days in tier
5. 2025-06-20 9K+ → 10K+ up after 1 days in tier
6. 2025-06-19 10K+ → 9K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Custom 404 Handler 60+ installs · 3.6★ · 4 shared tags C
• Redirection 2M+ installs · 4.4★ · 2 shared tags B
• Smart Custom 404 Error Page 100K+ installs · 4.9★ · 2 shared tags A
• Redirection 100K+ installs · 4.9★ · 2 shared tags A
• WP 404 Auto Redirect to Similar Post 30K+ installs · 4.8★ · 2 shared tags B
• SEO Redirection Plugin – 301 Redirect Manager 10K+ installs · 4.2★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for Custom 404 Pro into a readme, a review or a deck. It updates itself.

Custom 404 Pro: 7K+ active installs, 4.2★ (22 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/custom-404-pro