Read the docs

Gemini Labs

Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Gemini Labs records in CISA KEV

No Gemini Labs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Site Reviews 9 records HIGH

Records

20 records

TI-2024-02856 CVE-2024-3050

Site Reviews < 7.0.0 - IP Spoofing

Priority HIGH 80

The Site Reviews WordPress plugin before 7.0.0 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00565 Published 2024-05-29 Fixed in 7.0.0
TI-2025-01056 CVE-2025-1232 · GHSA-6qw8-39x3-j5rj

Site Reviews < 7.2.5 - Unauthenticated Stored XSS

Priority HIGH 73

The Site Reviews WordPress plugin before 7.2.5 does not properly sanitise and escape some of its Review fields, which could allow unauthenticated users to perform Stored XSS attacks

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01931 Published 2025-03-19 Fixed in 7.2.5 CWE-79
TI-2023-01439 CVE-2023-1525 · GHSA-c62j-xm9j-qw97

Site Reviews < 6.7.1 - Admin+ Stored XSS

Priority MEDIUM 55

The Site Reviews WordPress plugin before 6.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilter…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00501 Published 2023-05-02 Fixed in 6.7.1 CWE-79
TI-2022-23147 CVE-2022-46801 · GHSA-rx9f-2j6q-9pff

WordPress Site Reviews Plugin <= 6.2.0 is vulnerable to CSV Injection

Priority MEDIUM 50

Improper Neutralization of Formula Elements in a CSV File vulnerability in Paul Ryley Site Reviews.This issue affects Site Reviews: from n/a through 6.2.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00702 Published 2023-11-07 No fix listed CWE-1236
TI-2026-86506 CVE-2026-119494 · GHSA-whgw-738j-98fx

Cross-site scripting in WordPress Site Reviews plugin

Priority LOW 39

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Gemini Labs Site Reviews site-reviews allows Code Injection.This issue affects Site Reviews: from n/a through 8.3.6.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS — Published 2026-11-07 No fix listed CWE-80
TI-2026-51501 CVE-2026-73382 · GHSA-jp6j-vv83-v73x

WordPress Site Reviews plugin <= 8.2.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gemini Labs Site Reviews site-reviews allows Stored XSS.This issue affects Site Reviews: from n/a through 8.2.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-08-18 No fix listed CWE-79
TI-2023-27236 CVE-2023-49832 · GHSA-cmc6-jgxj-h4r2

WordPress Site Reviews plugin <= 6.10.2 - Broken Access Control vulnerability

Priority LOW 31

Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through <= 6.10.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00498 Published 2024-12-09 No fix listed CWE-862
TI-2021-07252 CVE-2021-24973 · GHSA-4p7m-87rg-hcph

Site Reviews < 5.17.3 - Unauthenticated Stored Cross-Site Scripting

Priority LOW 30

The Site Reviews WordPress plugin before 5.17.3 does not sanitise and escape the site-reviews parameter of the glsr_action AJAX action (available to unauthenticated and any authenticated users), allowing them to perform…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01335 Published 2022-01-03 Fixed in 5.17.3 CWE-79
TI-2018-00560 CVE-2018-0603 · GHSA-46rm-6xmg-3mgq

Cross-site scripting in Gemini Labs Site Reviews

Priority LOW 30

Cross-site scripting vulnerability in Site Reviews versions prior to 2.15.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01288 Published 2018-06-26 No fix listed CWE-79
TI-2026-75282 CVE-2026-110366 · GHSA-qxrf-mf4r-8pg5

Missing authorization in Site Reviews WordPress plugin

Priority LOW 29

Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through 8.3.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00171 Published 2026-10-16 No fix listed CWE-862
TI-2026-65672 CVE-2026-103340 · GHSA-jjv3-2jvx-fg29

WordPress Site Reviews plugin <= 8.3.2 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through 8.3.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00171 Published 2026-10-01 No fix listed CWE-862
TI-2024-02130 CVE-2024-2293 · GHSA-362r-2q86-m3fq

Site Reviews <= 6.11.4 - Authenticated(Subscriber+) Stored Cross-Site Scripting via display name

Priority LOW 29

The Site Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user display name in all versions up to, and including, 6.11.4 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00546 Published 2024-03-13 No fix listed CWE-79
TI-2026-82393 CVE-2026-118087 · GHSA-cghw-6w9g-rfqj

Site Reviews plugin for WordPress: Stored Cross-Site Scripting

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gemini Labs Site Reviews site-reviews allows Stored XSS.This issue affects Site Reviews: from n/a through 8.3.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0017 Published 2026-10-29 No fix listed CWE-79
TI-2024-19269 CVE-2024-29095 · GHSA-c65x-frp2-5rxx

WordPress Site Reviews plugin <= 6.11.6 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gemini Labs Site Reviews site-reviews.This issue affects Site Reviews: from n/a through <= 6.11.6.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00322 Published 2024-03-19 No fix listed CWE-79
TI-2021-06886 CVE-2021-24603 · GHSA-j3qx-4gvc-v53m

Site Reviews < 5.13.1 - Authenticated Stored XSS

Priority LOW 25

The Site Reviews WordPress plugin before 5.13.1 does not sanitise some of its Review Details when adding a review as an admin, which could allow them to perform Cross-Site Scripting attacks when the unfiltered_html is di…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-09-06 Fixed in 5.13.1 CWE-79
TI-2023-12335 CVE-2023-27625 · GHSA-563r-99qp-c364

WordPress Site Reviews plugin <= 6.5.0 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Paul Ryley Site Reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through 6.5.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00395 Published 2024-12-09 No fix listed CWE-862
Open these records in search →