Local File Inclusion Vulnerability in Developer Loggers for Simple History Plugin by WordPress
CVE-2025-10050
6.6MEDIUM
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 17 September 2025
What is CVE-2025-10050?
The Developer Loggers for Simple History plugin for WordPress is susceptible to a Local File Inclusion vulnerability due to a flaw in the enabled_loggers parameter. This vulnerability allows authenticated users with Administrator privileges to include and execute arbitrary PHP files on the server. Consequently, it poses risks such as unauthorized access, exposure of sensitive data, and code execution for malicious purposes when exploitable file types are uploaded and included.
Affected Version(s)
Developer Loggers for Simple History * <= 0.5