CVE-2025-10212: Missing Authorization

The SiteAlert Formerly WP Health plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.9.8. This makes it possible for unauthenticated attackers to view the site health information, includi...

WordPress SiteAlert (Formerly WP Health) Plugin <= 1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software SiteAlert Formerly WP Health Type Plugin Vulnerable versions = 1.9.7 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-46857 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 1208a2222926 Credits Cat...