Developer Loggers for Simple History Local File Inclusion Vulnerability

A local file inclusion vulnerability has been identified in the Developer Loggers for Simple History WordPress plugin, affecting all versions up to and including 0.5. The vulnerability arises in the enabled_loggers parameter, allowing authenticated attackers with Administrator-level access to include and execute arbitrary PHP files on the server. This exploitation could bypass access controls, access sensitive data, or execute code in cases where PHP files can be uploaded and included.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive data, bypassing of access controls, or execution of malicious code on the server.

Remediation

Users are advised to update the plugin to version 0.5.1 or a newer patched version.