Extension WordPress
Vulnérabilités Health Check & Troubleshooting
Cette page rassemble les failles publiées pour Health Check & Troubleshooting, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Health Check & Troubleshooting
5 fiches
Health Check & Troubleshooting <= 1.7.1 – Authenticated (Admin+) Path Traversal
The Health Check & Troubleshooting plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.1. This makes it possible for authenticated attackers, with Administrator-level access and above, to perform actions on files…
*-1.7.1
Non indiqué
15/12/2025
Health Check & Troubleshooting <= 1.5.1 – Cross-Site Request Forgery via health_check_troubleshoot_get_captures
The Health Check & Troubleshooting plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.1. This is due to missing or incorrect nonce validation on the health_check_troubleshoot_get_captures function. This makes it possible…
*-1.5.1
1.6.0
31/03/2023
Health Check & Troubleshooting <= 1.2.3 – Cross-Site Request Forgery
The Health Check & Troubleshooting plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.3. This is due to missing or incorrect nonce validation. This makes it possible for authenticated attackers to…
*-1.2.3
1.2.4
25/01/2019
Health Check & Troubleshooting <= 1.2.3 – Path Traversal
The Health Check & Troubleshooting plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 1.2.3 via the POST parameter 'file' where it is used unchecked with 'file_get_contents'. This allows authenticated attackers to read…
*-1.2.3
1.2.4
25/01/2019
Health Check & Troubleshooting <= 1.2.3 – Missing Authorization Checks
The Health Check & Troubleshooting plugin for WordPress is vulnerable to unauthorized execution of AJAX actions by subscriber level users and above in versions up to, and including 1.2.3. This is due to missing capability checks on the…
*-1.2.3
1.2.4
25/01/2018
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.