CVE-2026-103340

MediumCVSS 5.3

Published: 01/10/2026(UTC)Updated: 01/10/2026(UTC)Translated: 01/10/2026(UTC)NVD NIST

Summary

Site Reviews plugin has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control levels. Affects versions up to 8.3.2.

Risk Assessment

Unauthorized access to functions or data, potentially leading to system integrity compromise.

Recommendation

Update the plugin to the latest version and review permission configuration.

Other vulnerabilities in Site Reviews

See all

CVE-2026-94078High
The Site Reviews plugin in versions <= 8.3.1 is vulnerable to unauthenticated Cross Site Scripting (XSS). An unauthenticated attacker can inject malicious script.
CVE-2026-73382High
Unauthenticated Cross Site Scripting (XSS) vulnerability in Site Reviews versions up to 8.2.0.

Original NVD description (English source)

Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through 8.3.2.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS