eskapism
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Simple History – Track, Log, and Audit WordPress Changes | 2 | – | May 30, 2026 |
| Developer Loggers for Simple History | 1 | – | Sep 17, 2025 |
Exploited and recent CVEs
- CVE-2026-7459 Simple History – Track, Log, and Audit WordPress Changes <= 5.26.0 - Authenticated (Subscriber+) Account Takeover via Missing Authorization on Event Reaction Endpoint 0.6%
- CVE-2025-10050 Developer Loggers for Simple History <= 0.5 - Authenticated (Admin+) Local File Inclusion 1.0%
- CVE-2025-5760 Simple History <= 5.8.1 - Authenticated (Administrator+) Sensitive Information Exposure via Detective Mode 0.5%