WordPress plugin
Simple History – Track, Log, and Audit WordPress Changes security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 6 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium5
- Low0
All Simple History – Track, Log, and Audit WordPress Changes vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Authenticated (Subscriber+) Account Takeover via Missing Authorization on Event Reaction Endpoint ≤5.26.0Update to 5.27.0 | CVE-2026-7459 | |
| Medium5.3 | Unauthenticated Information Exposure ≤5.24.0Update to 5.24.1 | CVE-2026-39473 | |
| Medium4.9 | Authenticated (Administrator+) Sensitive Information Exposure via Detective Mode ≤5.8.1Update to 5.8.2 | CVE-2025-5760 | |
| Medium6.0 | Authenticated (Subscriber+) CSV Injection ≤3.3.1Update to 3.4.0 | CVE-2022-45350 | |
| Medium4.3 | Sensitive Information Disclosure ≤2.7.4Update to 2.7.5 | — | |
| Medium5.3 | Sensitive Information Disclosure ≤1.0.7Update to 1.0.8 | — |
- High7.5Authenticated (Subscriber+) Account Takeover via Missing Authorization on Event Reaction Endpoint
≤5.26.0Update to 5.27.0
- Medium5.3Unauthenticated Information Exposure
≤5.24.0Update to 5.24.1
- Medium4.9Authenticated (Administrator+) Sensitive Information Exposure via Detective Mode
≤5.8.1Update to 5.8.2
- Medium6.0Authenticated (Subscriber+) CSV Injection
≤3.3.1Update to 3.4.0
- Medium4.3Sensitive Information Disclosure
≤2.7.4Update to 2.7.5
- Medium5.3Sensitive Information Disclosure
≤1.0.7Update to 1.0.8
Simple History – Track, Log, and Audit WordPress Changes: common questions
Does Simple History – Track, Log, and Audit WordPress Changes have known vulnerabilities?
Yes. VulnCrest Radar lists 6 known vulnerabilities in Simple History – Track, Log, and Audit WordPress Changes: 1 high, 5 medium. None are known to affect version null.
How do I check which version of Simple History – Track, Log, and Audit WordPress Changes I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Simple History – Track, Log, and Audit WordPress Changes vulnerability?
CVE-2026-7459, published May 29, 2026: Simple History – Track, Log, and Audit WordPress Changes <= 5.26.0 - Authenticated (Subscriber+) Account Takeover via Missing Authorization on Event Reaction Endpoint. Severity: High (CVSS 7.5).
Is any Simple History – Track, Log, and Audit WordPress Changes vulnerability listed in CISA KEV?
No. None of the known Simple History – Track, Log, and Audit WordPress Changes vulnerabilities is currently listed in the CISA KEV catalog.