Site Health Tools Security & Risk Analysis

wordpress.org/plugins/site-health-tools

Introduces additional common tools to the Site Health interface.

200 active installs v1.0.1 PHP 7.1+ WP 5.8+ Updated Jan 1, 2026
health-checksite-health
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Site Health Tools Safe to Use in 2026?

Generally Safe

Score 100/100

Site Health Tools has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The 'site-health-tools' plugin v1.0.1 exhibits a very limited attack surface with no apparent direct entry points exposed to unauthenticated users. This is a positive sign for its security posture. The static analysis did not reveal any critical or high-severity issues in taint analysis, suggesting that data sanitization and path handling are robust. Furthermore, the plugin has no recorded vulnerability history, which is excellent and indicates a stable and secure track record.

Key Concerns

  • SQL queries without prepared statements
  • Low percentage of properly escaped output
  • No nonce checks implemented
  • No capability checks implemented
Vulnerabilities
None known

Site Health Tools Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Site Health Tools Code Analysis

Dangerous Functions
0
Raw SQL Queries
2
0 prepared
Unescaped Output
9
4 escaped
Nonce Checks
0
Capability Checks
0
File Operations
4
External Requests
0
Bundled Libraries
0

SQL Query Safety

0% prepared2 total queries

Output Escaping

31% escaped13 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
view_file_diff (SiteHealthTools\class-files-integrity.php:233)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Site Health Tools Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
actionwp_mail_failedSiteHealthTools\class-mail-check.php:55
Maintenance & Trust

Site Health Tools Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 1, 2026
PHP min version7.1
Downloads2K

Community Trust

Rating90/100
Number of ratings2
Active installs200
Developer Profile

Site Health Tools Developer Profile

Marius L. J.

5 plugins · 90K total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Site Health Tools

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/site-health-tools/build/site-health-tools.css/wp-content/plugins/site-health-tools/build/site-health-tools.js
Script Paths
/wp-content/plugins/site-health-tools/build/site-health-tools.js
Version Parameters
site-health-tools/build/site-health-tools.css?ver=site-health-tools/build/site-health-tools.js?ver=

HTML / DOM Fingerprints

CSS Classes
site-health-tool-plugin-compat-listsupported-version
Data Attributes
data-plugin-slugdata-plugin-versiondata-plugin-checked
JS Globals
SiteHealthTools
REST Endpoints
/wp-json/site-health-tools/v1/plugin-compat
FAQ

Frequently Asked Questions about Site Health Tools