Advisories · Technology
eskapism Simple History – Track, Log, and Audit WordPress Changes.
Every CVE that names eskapism Simple History – Track, Log, and Audit WordPress Changes among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Simple History – Track, Log, and Audit WordPress Changes <= 5.26.0 - Authenticated (Subscriber+) Account Takeover via Missing Authorization on Event Reaction Endpoint
- eskapism Simple History – Track, Log, and Audit WordPress Changes
- CWE-640
- CVSS 4.9 Medium
Simple History <= 5.8.1 - Authenticated (Administrator+) Sensitive Information Exposure via Detective Mode
- eskapism Simple History – Track, Log, and Audit WordPress Changes
- CWE-256