All packages
Site Reviews vulnerabilities
3 known CVE vulnerabilities in Site Reviews, translated and rated.
- CVE-2026-103340Medium
Site Reviews plugin has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control levels. Affects versions up to 8.3.2.
- CVE-2026-94078High
The Site Reviews plugin in versions <= 8.3.1 is vulnerable to unauthenticated Cross Site Scripting (XSS). An unauthenticated attacker can inject malicious script.
- CVE-2026-73382High
Unauthenticated Cross Site Scripting (XSS) vulnerability in Site Reviews versions up to 8.2.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS