Skip to content
OpenAdvisories

Vendor

Gemini Labs

11 known vulnerabilities.

Products

Site Reviews 11
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-119494

    WordPress Site Reviews plugin <= 8.3.6 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Gemini Labs Site Reviews site-reviews allows Code Injection.This issue affects Site Reviews: from n/a through 8.3.6.

    Gemini Labs Site Reviews
  • Medium 6.5
    CVE-2026-118087

    WordPress Site Reviews plugin <= 8.3.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gemini Labs Site Reviews site-reviews allows Stored XSS.This issue affects Site Reviews: from n/a through 8.3.5.

    Gemini Labs Site Reviews
  • Medium 5.3
    CVE-2026-110366

    WordPress Site Reviews plugin <= 8.3.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through 8.3.4.

    Gemini Labs Site Reviews
  • Medium 5.3
    CVE-2026-103340

    WordPress Site Reviews plugin <= 8.3.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through 8.3.2.

    Gemini Labs Site Reviews
  • Medium 6.5
    CVE-2026-57318

    WordPress Site Reviews plugin <= 8.0.11 - Sensitive Data Exposure vulnerability

    Subscriber Sensitive Data Exposure in Site Reviews <= 8.0.11 versions.

    Gemini Labs Site Reviews
  • Medium 5.3
    CVE-2023-49832

    WordPress Site Reviews plugin <= 6.10.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through <= 6.10.2.

    Gemini Labs Site Reviews
  • Medium 5.9
    CVE-2024-29095

    WordPress Site Reviews plugin <= 6.11.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gemini Labs Site Reviews site-reviews.This issue affects Site Reviews: from n/a through <= 6.11.6.

    Gemini Labs Site Reviews
  • Medium 6.4
    CVE-2024-2293

    Site Reviews <= 6.11.4 - Authenticated(Subscriber+) Stored Cross-Site Scripting via display name

    The Site Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user display name in all versions up to, and including, 6.11.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated atta…

    Gemini Labs Site Reviews Web / CMS