Skip to content
OpenAdvisories

Vendor

eskapism

3 known vulnerabilities.

Products

Simple History – Track, Log, and Audit WordPress Changes 2 Developer Loggers for Simple History 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-7459 Public exploit

    Simple History – Track, Log, and Audit WordPress Changes <= 5.26.0 - Authenticated (Subscriber+) Account Takeover via Missing Authorization on Event Reaction Endpoint

    The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated (Subscriber+) account takeover in all versions up to, and including, 5.26.0 via the event reaction endpoints (react_to_event() / unreact_to_event(…

    eskapism Simple History – Track, Log, and Audit WordPress Changes Web / CMS