Simple History – user activity log, audit tool, 2d018bf11d8cc00370eab69492a7b038453d644b

CVE, Research URL: 2d018bf11d8cc00370eab69492a7b038453d644b
Home page URL: Security reports for Simple History – user activity log, audit tool
Application: Simple History – user activity log, audit tool
Published on: Aug 01, 2014
Research Description: Simple History – Track, Log, and Audit WordPress Changes [simple-history] < 1.0.8 Simple History <= 1.0.7 - Sensitive Information Disclosure The Simple History plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 1.0.7 via the 'rss_secret' parameter. This can allow unauthenticated attackers to view sensitive information from the RSS feed.
Affected versions: max 1.0.8.
Status: vulnerable