Eskapism vulnerabilities
We track 1 vulnerability in Eskapism products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 30, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Eskapism vulnerabilities
- 7.5 High severity
Simple History – Track, Log, and Audit…: Weak Password Recovery Mechanism for Forgotten Password
The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated (Subscriber+) account takeover in all versions up to, and including, 5.26.0 via the event reaction endpoints (react_to_event() / unreact_to_event()