Information leakage vulnerability in Simple History – Track, Log, and Audit WordPress Changes 5.8.1

The Simple History plugin for WordPress has a security vulnerability that could expose sensitive information. This is because the plugin does not properly protect data when using Detective Mode. When this mode is turned on, the plugin saves all information entered into a login form, including passwords, without encrypting them. This means that anyone with access to the plugin’s logs could potentially see users’ passwords. This can be especially dangerous if an attacker gains access to the database.