CVE Catalog
CVE-2026-39473
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.24%
15th percentile - higher than 15% of all known CVEs
Summary
The Simple History WordPress plugin inserts sensitive information into sent data. The vulnerability allows retrieval of embedded sensitive data.
Risk Assessment
An attacker can intercept sensitive data transmitted by the plugin, compromising information confidentiality.
Recommendation
Update the Simple History plugin to a version newer than 5.24.0.
Original NVD description (English source)
Insertion of Sensitive Information Into Sent Data vulnerability in Pär Thernström Simple History simple-history allows Retrieve Embedded Sensitive Data.This issue affects Simple History: from n/a through <= 5.24.0.