Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: eskapism Clear all filters
TI-2026-06556 CVE-2026-7459 · GHSA-9jh7-hmgx-8gq5

Weak password recovery in eskapism Simple History – Track, Log, and Audit WordPress…

Priority LOW 36

The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated (Subscriber+) account takeover in all versions up to, and including, 5.26.0 via the event reaction endpoint…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00593 Published 2026-05-30 No fix listed CWE-640
TI-2025-05198 CVE-2025-5760 · GHSA-q2wh-799f-g8x3

Simple History <= 5.8.1 - Authenticated (Administrator+) Sensitive Information Exposure via Detective Mode

Priority LOW 23

The Simple History plugin for WordPress is vulnerable to sensitive data exposure via Detective Mode due to improper sanitization within the append_debug_info_to_context() function in versions prior to 5.8.1.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00467 Published 2025-06-06 No fix listed CWE-256