Read the docs

eskapism

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

eskapism records in CISA KEV

No eskapism vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-06556 CVE-2026-7459 · GHSA-9jh7-hmgx-8gq5

Weak password recovery in eskapism Simple History – Track, Log, and Audit WordPress…

Priority LOW 36

The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated (Subscriber+) account takeover in all versions up to, and including, 5.26.0 via the event reaction endpoint…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00593 Published 2026-05-30 No fix listed CWE-640
TI-2025-05198 CVE-2025-5760 · GHSA-q2wh-799f-g8x3

Simple History <= 5.8.1 - Authenticated (Administrator+) Sensitive Information Exposure via Detective Mode

Priority LOW 23

The Simple History plugin for WordPress is vulnerable to sensitive data exposure via Detective Mode due to improper sanitization within the append_debug_info_to_context() function in versions prior to 5.8.1.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00467 Published 2025-06-06 No fix listed CWE-256
Open these records in search →