Plugin icon

Simple History – Track, Log, and Audit WordPress Changes

simple-history

Vulnerabilities:

5

Last Updated:

June 2, 2026

Active Installs:

300000

Published
Title
Fixed in
CVSS
Published
2026-05-29
Title
Simple History < 5.27.0 - Subscriber+ Account Takeover via Missing Authorization on Event Reaction Endpoint
Fixed in
Fixed in 5.27.0
CVSS
7.5 (high)
Published
2026-03-22
Title
Simple History < 5.24.1 - Unauthenticated Information Exposure
Fixed in
Fixed in 5.24.1
CVSS
5.3 (medium)
Published
2025-06-05
Title
Simple History < 5.8.2 - Admin+ Sensitive Information Exposure via Detective Mode
Fixed in
Fixed in 5.8.2
CVSS
4.9 (medium)
Published
2023-02-02
Title
Simple History < 3.4.0 - Improper Neutralization of Formula Elements in a CSV File
Fixed in
Fixed in 3.4.0
CVSS
6.0 (medium)
Published
2014-08-01
Title
Simple History - RSS Feed "rss_secret" Disclosure Weakness
Fixed in
Fixed in 1.0.8
CVSS
n/a