{"id":6530,"date":"2025-06-06T09:58:32","date_gmt":"2025-06-06T09:58:32","guid":{"rendered":"http:\/\/localhost\/?p=6530"},"modified":"2025-06-06T09:58:32","modified_gmt":"2025-06-06T09:58:32","slug":"simple-history-581-authenticated-administrator-sensitive-information-exposure-via-detective-mode","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=6530","title":{"rendered":"Simple History <= 5.8.1 - Authenticated (Administrator+) Sensitive Information Exposure via Detective Mode"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nSimple History <= 5.8.1 - Authenticated (Administrator+) Sensitive Information Exposure via Detective Mode<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-06-06T11:13:16.129Z<\/td>\n<\/tr>\n
Last Seen<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\neskapism<\/td>\n<\/tr>\n
Product<\/th>\nSimple History \u2013 Track, Log, and Audit WordPress Changes<\/td>\n<\/tr>\n
Version<\/th>\n*<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n\n\n\n
Base Score<\/th>\n4.9 (MEDIUM)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:N\/S:U\/C:H\/I:N\/A:N<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\n<\/td>\n<\/tr>\n
Integrity Impact<\/th>\n<\/td>\n<\/tr>\n
Availability Impact<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nThe Simple History WordPress plugin exposes sensitive data by logging passwords in clear text when Detective Mode is enabled. This affects versions prior to 5.8.1, allowing attackers to retrieve stored passwords from logs.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
Vendor<\/th>\nWordPress Community<\/td>\n<\/tr>\n
Product<\/th>\nSimple History<\/td>\n<\/tr>\n
Affected Version<\/th>\n<5.8.1<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n