CVE-2025-5760 is a vulnerability in the Simple History – Track, Log, and Audit WordPress Changes plugin caused by improper sanitization of logged data in Detective Mode. The append_debug_info_to_context() function records the full contents of $_POST and sometimes raw request bodies or $_GET without redacting password-related keys. As a result, user passwords submitted during login events are stored in plaintext within the plugin's logs. This exposure affects all versions prior to 5.8.1. The vulnerability requires authenticated access to trigger login events and read the logs. The CVSS 3.1 score is 4.9 (medium severity), reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and high confidentiality impact.

Passwords submitted during login are stored in plaintext in plugin logs accessible to administrators or anyone with database read access. This compromises user credential confidentiality but does not affect integrity or availability. An attacker with sufficient privileges can retrieve these passwords, potentially leading to further account compromise.

No official patch or fix is currently documented in the provided data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, it is recommended to disable Detective Mode to prevent logging of sensitive data. Restrict database access to trusted administrators only to limit exposure. Monitor vendor channels for updates and apply any official patches promptly once released.