Input validation vulnerability in Redirect 404 Error Page to Homepage or Custom Page with Logs 1.8.7

The Redirect 404 Error Page to Homepage or Custom Page with Logs plugin for WordPress is vulnerable to a type of cyber attack called SQL Injection. This vulnerability affects versions of the plugin up to, and including, 1.8.7. The vulnerability exists because the plugin does not sufficiently protect user supplied parameters and does not correctly prepare existing SQL queries. A person with administrator-level access to the plugin can use the vulnerability to gain access to sensitive information from the database.