Simple History – Track, Log, and Audit WordPress Changes vulnerabilities
1 known vulnerability in Simple History – Track, Log, and Audit WordPress Changes from Eskapism. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
Simple History – Track, Log, and Audit…: Weak Password Recovery Mechanism for Forgotten Password
The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated (Subscriber+) account takeover in all versions up to, and including, 5.26.0 via the event reaction endpoints (react_to_event() / unreact_to_event()