Unauthorized Data Access in SiteAlert Plugin for WordPress

CVE-2025-10212

What is CVE-2025-10212?

The SiteAlert plugin, previously known as WP Health, is susceptible to unauthorized access of sensitive data because of inadequate capability checks affecting multiple functions. This vulnerability allows unauthenticated attackers to access site health information, revealing critical data such as installed and outdated plugins, PHP version, and database version. Users are advised to update to the latest version or implement security measures to mitigate potential data breaches.

References