Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-39473 EUVD-2026-20140GHSA-v3gq-fh32-rp3x

WordPress Simple History plugin <= 5.24.0 - Sensitive Data Exposure vulnerability

Published Apr 8, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Insertion of Sensitive Information Into Sent Data vulnerability in Pär Thernström Simple History simple-history allows Retrieve Embedded Sensitive Data.This issue affects Simple History: from n/a through <= 5.24.0.

Affected products

VendorProductAffectedFixed
Pär Thernström Simple History ≤ 5.24.0 —

References