Health Check & Troubleshooting Security & Risk Analysis

The health-check plugin v1.7.1 exhibits a mixed security posture. While it demonstrates good practices in areas like output escaping and SQL query sanitization, several concerning findings from the static analysis, combined with its vulnerability history, warrant careful consideration.

The static analysis reveals an attack surface with 8 total entry points, of which 3 are unprotected AJAX handlers. This lack of authorization on a portion of its AJAX endpoints is a significant concern, as it could allow unauthenticated users to trigger potentially sensitive actions. The presence of the dangerous `exec` function, although not flagged in taint analysis as critical or high, is an inherent risk that should be monitored. The taint analysis itself shows no critical or high severity unsanitized paths, which is a positive indicator.

However, the plugin's vulnerability history is a major red flag. With 5 known CVEs, including 1 currently unpatched, and past vulnerabilities covering Path Traversal, CSRF, and Missing Authorization, it suggests a recurring pattern of exploitable weaknesses. The fact that the last vulnerability was as recent as December 2025 and remains unpatched is particularly alarming. While the plugin has strengths in code hygiene, the persistent nature of vulnerabilities and the presence of unprotected entry points create a substantial risk profile.