Does Site Health Manager have any unpatched vulnerabilities?

No. All known vulnerabilities in Site Health Manager have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Site Health Manager compatible with WordPress 5.2.24?

According to WordPress.org data, Site Health Manager 1.1.2 has been tested up to WordPress 5.2.24. Check the plugin's changelog for the latest compatibility information.

Is Site Health Manager compatible with PHP 5.6+?

Site Health Manager requires PHP 5.6 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Site Health Manager updated?

Site Health Manager was last updated on Jun 20, 2019. Frequent updates are generally a positive security signal.

What is Site Health Manager's security score?

Site Health Manager has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Site Health Manager Security & Risk Analysis

wordpress.org/plugins/site-health-manager

Control which status tests and what debug information appear in your Site Health screen.

100 active installs v1.1.2 PHP 5.6+ WP 5.2+ Updated Jun 20, 2019

confidential-datadebughealthsecuritysite-health

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Site Health Manager Safe to Use in 2026?

Generally Safe

Score 85/100

Site Health Manager has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 6yr ago

Risk Assessment

The "site-health-manager" v1.1.2 plugin exhibits a strong security posture based on the provided static analysis. The complete absence of AJAX handlers, REST API routes, shortcodes, and cron events with exposed attack vectors significantly reduces the potential for external exploitation. Furthermore, the code demonstrates good practices by utilizing prepared statements for all SQL queries and having a robust capability check in place. The presence of a nonce check is also a positive indicator of secure development.

Key Concerns

Percentage of properly escaped outputs is low

Vulnerabilities

None known

Site Health Manager Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

Site Health Manager Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

21 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

70% escaped30 total outputs

Attack Surface

Site Health Manager Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 5

filterdebug_informationsite-health-manager.php:145

filtersite_status_testssite-health-manager.php:148

actioninitsite-health-manager.php:151

actionadmin_menusite-health-manager.php:254

actionplugins_loadedsite-health-manager.php:604

Maintenance & Trust

Site Health Manager Maintenance & Trust

Maintenance Signals

WordPress version tested5.2.24

Last updatedJun 20, 2019

PHP min version5.6

Downloads4K

Community Trust

Rating100/100

Number of ratings4

Active installs100

Alternatives

Site Health Manager Alternatives

WPVulnerability

wpvulnerability

100

Get WordPress vulnerability alerts from the WPVulnerability Database API.

10K No CVEs

SiteLock Security – WP Hardening, Login Security & Malware Scans

sitelock

Free, lightweight WordPress security. Harden your site with login protection & 2FA, see Site Health clearly and run on-demand checks—setup in minutes.

1K 2 CVEs