Authenticated Account Takeover Vulnerability in Simple History Plugin for WordPress

CVE-2026-7459

What is CVE-2026-7459?

The Simple History plugin for WordPress is susceptible to an authenticated account takeover due to insufficient permissions on specific event reaction endpoints. This vulnerability allows a Subscriber-level user to exploit the plugin's mechanism to access sensitive event data, including the full context of any Simple History event. Through a series of steps involving password reset requests and brute-force attacks on event IDs, an attacker can retrieve essential information such as admin password reset email content, including the reset URL and key. This flaw is present in all versions up to 5.26.0, particularly affecting installations where experimental features are enabled.

References