simple-history
WordPress · Plugin
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Simple History – Track, Log, and Audit WordPress Changes <= 5.26.0 - Authenticated (Subscriber+) Account Takeover via Missing Authorization on Event Reaction Endpoint | simple-history | WordPress | High | Fix reported | |
| Simple History <= 5.24.0 - Unauthenticated Information Exposure | simple-history | WordPress | Medium | Fix reported | |
| Simple History <= 5.8.1 - Authenticated (Administrator+) Sensitive Information Exposure via Detective Mode | simple-history | WordPress | Medium | Fix reported | |
| Simple History <= 1.0.7 - Sensitive Information Disclosure | simple-history | WordPress | Medium | Fix reported | |
| Simple History <= 3.3.1 - Authenticated (Subscriber+) CSV Injection | simple-history | WordPress | Medium | Fix reported | |
| Simple History Plugin < 2.7.5 - Sensitive Information Disclosure | simple-history | WordPress | Medium | Fix reported |