Site Reviews vulnerabilities

4 known CVE vulnerabilities in Site Reviews, translated and rated.

CVE-2026-118087Medium
The Site Reviews plugin by Gemini Labs (up to version 8.3.5) has a Cross-site Scripting (Stored XSS) vulnerability due to improper neutralization of input during web page generation.
CVE-2026-103340Medium
Site Reviews plugin has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control levels. Affects versions up to 8.3.2.
CVE-2026-94078High
The Site Reviews plugin in versions <= 8.3.1 is vulnerable to unauthenticated Cross Site Scripting (XSS). An unauthenticated attacker can inject malicious script.
CVE-2026-73382High
Stored XSS vulnerability in the Site Reviews plugin by Gemini Labs. Improper input neutralization during web page generation allows persistent script injection. Affects versions from n/a through 8.2.0.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS