Lucene search
K

20 matches found

RedhatCVE
RedhatCVE
added 2025/10/04 11:53 a.m.6 views

CVE-2025-10212

The SiteAlert Formerly WP Health plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.9.8. This makes it possible for unauthenticated attackers to view the site health information, includi...

5.3CVSS5.3AI score0.0009EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/10/03 11:15 p.m.3 views

WordPress SiteAlert (Formerly WP Health) plugin <= 1.9.8 - Missing Authorization to Unauthenticated Site Health Information Exposure vulnerability

Missing Authorization to Unauthenticated Site Health Information Exposure vulnerability discovered by D01EXPLOIT OFFICIAL in WordPress Plugin SiteAlert Formerly WP Health versions = 1.9.8...

5.3CVSS6.6AI score0.0009EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-49638

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.00057EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-32288

Malicious code in bioql PyPI...

5.3CVSS6.6AI score0.0009EPSS
Exploits0References5
NVD
NVD
added 2025/10/03 12:15 p.m.3 views

CVE-2025-10212

The SiteAlert Formerly WP Health plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.9.8. This makes it possible for unauthenticated attackers to view the site health information, includi...

5.3CVSS0.0009EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/10/03 11:17 a.m.4 views

CVE-2025-10212 SiteAlert (Formerly WP Health) <= 1.9.8 - Missing Authorization to Unauthenticated Site Health Information Exposure

The SiteAlert Formerly WP Health plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.9.8. This makes it possible for unauthenticated attackers to view the site health information, includi...

5.3CVSS0.0009EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/10/03 11:17 a.m.1 views

CVE-2025-10212 SiteAlert (Formerly WP Health) <= 1.9.8 - Missing Authorization to Unauthenticated Site Health Information Exposure

The SiteAlert Formerly WP Health plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.9.8. This makes it possible for unauthenticated attackers to view the site health information, includi...

5.3CVSS5AI score0.0009EPSS
Exploits0References4
CVE
CVE
added 2025/10/03 11:17 a.m.11 views

CVE-2025-10212

CVE-2025-10212 concerns the SiteAlert (Formerly WP Health) WordPress plugin. Connected documents confirm a missing capability check in multiple functions across versions up to and including 1.9.8, allowing unauthenticated access to site health information (e.g., installed/outdated plugins, PHP an...

5.3CVSS5AI score0.0009EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/10/03 12:0 a.m.2 views

PT-2025-40469

Name of the Vulnerable Software and Affected Versions SiteAlert Formerly WP Health plugin for WordPress versions through 1.9.8 Description The software is susceptible to unauthorized data access because of a missing capability check in several functions. This allows unauthenticated attackers to...

5.3CVSS6.3AI score0.0009EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/10/03 12:0 a.m.2 views

WordPress plugin SiteAlert 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.4AI score0.0009EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 1:7 a.m.4 views

CVE-2022-46857

Cross-Site Request Forgery CSRF vulnerability in SiteAlert plugin = 1.9.7 versions...

8.8CVSS7.1AI score0.00057EPSS
Exploits0References1
OSV
OSV
added 2023/07/18 12:15 p.m.0 views

CVE-2022-46857

Cross-Site Request Forgery CSRF vulnerability in SiteAlert plugin = 1.9.7 versions...

8.8CVSS5.8AI score0.00057EPSS
Exploits0References1
NVD
NVD
added 2023/07/18 12:15 p.m.10 views

CVE-2022-46857

Cross-Site Request Forgery CSRF vulnerability in SiteAlert plugin = 1.9.7 versions...

8.8CVSS0.00057EPSS
Exploits0References1
Prion
Prion
added 2023/07/18 12:15 p.m.13 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in SiteAlert plugin = 1.9.7 versions...

6.8CVSS8.7AI score0.00057EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/18 11:41 a.m.16 views

CVE-2022-46857 WordPress SiteAlert (Formerly WP Health) Plugin <= 1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in SiteAlert plugin = 1.9.7 versions...

5.4CVSS7.1AI score0.00057EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/07/18 11:41 a.m.19 views

CVE-2022-46857 WordPress SiteAlert (Formerly WP Health) Plugin <= 1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in SiteAlert plugin = 1.9.7 versions...

6.5CVSS9AI score0.00057EPSS
Exploits0References1
CVE
CVE
added 2023/07/18 11:41 a.m.45 views

CVE-2022-46857

CVE-2022-46857 : Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin SiteAlert (formerly WP Health) affecting versions ≤ 1.9.7. Public sources identify the issue as CSRF with unauthenticated attacker impact; CVSS specifics vary by source. The initial doc does not confirm explo...

8.8CVSS7.1AI score0.00057EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/18 12:0 a.m.3 views

PT-2023-15082 · Sitealert · Sitealert

Name of the Vulnerable Software and Affected Versions: SiteAlert plugin versions = 1.9.7 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that...

8.8CVSS8.8AI score0.00057EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/07/18 12:0 a.m.1 views

WordPress Plugin SiteAlert 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS8.2AI score0.00057EPSS
Exploits0References2
Patchstack
Patchstack
added 2023/04/19 12:0 a.m.10 views

WordPress SiteAlert (Formerly WP Health) Plugin <= 1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software SiteAlert Formerly WP Health Type Plugin Vulnerable versions = 1.9.7 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-46857 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 1208a2222926 Credits Cat...

8.8CVSS7AI score0.00057EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder