Site Reviews (Unknown) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-10. Vendor: Unknown.

CVEs of Site Reviews

• CVE-2026-82925 - CVSS 8.1 (high), 2026-09-10: The Site Reviews WordPress plugin before 8.3.0 does not prevent request data from being deserialized, and derives the key protecting that data by padding out…
• CVE-2025-1232 - CVSS 8.8 (high), 2025-03-19: The Site Reviews WordPress plugin before 7.2.5 does not properly sanitise and escape some of its Review fields, which could allow unauthenticated users to…
• CVE-2024-3050 - CVSS 9.1 (critical), 2024-05-29: The Site Reviews WordPress plugin before 7.0.0 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value.…
• CVE-2023-1525 - CVSS 4.8 (medium), 2023-05-02: The Site Reviews WordPress plugin before 6.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…
• CVE-2021-24973 - CVSS 6.1 (medium), 2022-01-03: The Site Reviews WordPress plugin before 5.17.3 does not sanitise and escape the site-reviews parameter of the glsr_action AJAX action (available to…
• CVE-2021-24603 - CVSS 5.4 (medium), 2021-09-06: The Site Reviews WordPress plugin before 5.13.1 does not sanitise some of its Review Details when adding a review as an admin, which could allow them to…