Geminilabs Site Reviews
9 CVEs affecting Geminilabs Site Reviews. Latest disclosed: 2025-03-19. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-3050 | Critical | 9.1 | 2024-05-29 | The Site Reviews WordPress plugin before 7.0.0 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value… |
CVE-2025-1232 | High | 8.8 | 2025-03-19 | The Site Reviews WordPress plugin before 7.2.5 does not properly sanitise and escape some of its Review fields, which could allow unauthenticated users to perf… |
CVE-2023-27629 | Medium | 6.5 | 2023-06-22 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Paul Ryley Site Reviews plugin <= 6.5.1 versions. |
CVE-2023-27612 | Medium | 6.5 | 2023-06-22 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Paul Ryley Site Reviews plugin <= 6.5.1 versions. |
CVE-2022-46801 | Medium | 6.1 | 2023-11-07 | Improper Neutralization of Formula Elements in a CSV File vulnerability in Paul Ryley Site Reviews.This issue affects Site Reviews: from n/a through 6.2.0. |
CVE-2021-24973 | Medium | 6.1 | 2022-01-03 | The Site Reviews WordPress plugin before 5.17.3 does not sanitise and escape the site-reviews parameter of the glsr_action AJAX action (available to unauthenti… |
CVE-2018-0603 | Medium | 6.1 | 2018-06-26 | Cross-site scripting vulnerability in Site Reviews versions prior to 2.15.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vect… |
CVE-2021-24603 | Medium | 5.4 | 2021-09-06 | The Site Reviews WordPress plugin before 5.13.1 does not sanitise some of its Review Details when adding a review as an admin, which could allow them to perfor… |
CVE-2023-1525 | Medium | 4.8 | 2023-05-02 | The Site Reviews WordPress plugin before 6.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfo… |