What’s Vulnerable › Products

Gemini Labs Site Reviews vulnerabilities

20 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your Gemini Labs Site Reviews version is affected

Latest Gemini Labs Site Reviews vulnerabilities

• CVE-2026-118087 — WordPress Site Reviews plugin <= 8.3.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2026-110366 — WordPress Site Reviews plugin <= 8.3.4 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2026-103340 — WordPress Site Reviews plugin <= 8.3.2 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2026-94078 — WordPress Site Reviews plugin <= 8.3.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-82925 — Site Reviews 7.2.2 - 8.2.2 - Unauthenticated PHP Object Injection via Form Signature (CVSS 8.1)
• CVE-2026-73382 — WordPress Site Reviews plugin <= 8.2.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-57318 — WordPress Site Reviews plugin <= 8.0.11 - Sensitive Data Exposure vulnerability (CVSS 6.5)
• CVE-2025-1232 — Site Reviews < 7.2.5 - Unauthenticated Stored XSS (CVSS 8.8)
• CVE-2023-49832 — WordPress Site Reviews plugin <= 6.10.2 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2023-27625 — WordPress Site Reviews plugin <= 6.5.0 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2024-3050 — Site Reviews < 7.0.0 - IP Spoofing (CVSS 9.1)
• CVE-2024-29095 — WordPress Site Reviews plugin <= 6.11.6 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
• CVE-2024-2293 — Site Reviews <= 6.11.4 - Authenticated(Subscriber+) Stored Cross-Site Scripting via display name (CVSS 6.4)
• CVE-2022-46801 — WordPress Site Reviews Plugin <= 6.2.0 is vulnerable to CSV Injection (CVSS 9.8)
• CVE-2023-27629 — WordPress Site Reviews Plugin <= 6.5.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)
• CVE-2023-27612 — WordPress Site Reviews Plugin <= 6.5.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)
• CVE-2023-1525 — Site Reviews < 6.7.1 - Admin+ Stored XSS (CVSS 4.8)
• CVE-2021-24973 — Site Reviews < 5.17.3 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.1)
• CVE-2021-24603 — Site Reviews < 5.13.1 - Authenticated Stored XSS (CVSS 5.4)
• CVE-2018-0603 — (CVSS 6.1)