Plugin icon

Site Reviews

site-reviews

Vulnerabilities:

14

Last Updated:

August 23, 2026

Active Installs:

60000

Published
Title
Fixed in
CVSS
Published
2026-08-14
Title
Site Reviews < 8.2.1 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 8.2.1
CVSS
7.2 (high)
Published
2026-06-26
Title
Site Reviews < 8.0.12 - Authenticated (Subscriber+) Sensitive Information Exposure
Fixed in
Fixed in 8.0.12
CVSS
4.3 (medium)
Published
2025-02-26
Title
Site Reviews < 7.2.5 - Unauthenticated Stored XSS
Fixed in
Fixed in 7.2.5
CVSS
8.8 (high)
Published
2024-05-08
Title
Site Reviews < 7.0.0 - IP Spoofing
Fixed in
Fixed in 7.0.0
CVSS
5.3 (medium)
Published
2024-03-15
Title
Site Reviews < 6.11.7 - Authenticated (Author+) Stored Cross-Site Scripting
Fixed in
Fixed in 6.11.7
CVSS
6.4 (medium)
Published
2024-03-11
Title
Site Reviews < 6.11.7 - Authenticated(Subscriber+) Stored Cross-Site Scripting via display name
Fixed in
Fixed in 6.11.7
CVSS
6.4 (medium)
Published
2023-08-29
Title
Site Reviews < 6.10.3 - Missing Authorization
Fixed in
Fixed in 6.10.3
CVSS
5.4 (medium)
Published
2023-04-05
Title
Site Reviews < 6.7.1 - Admin+ Stored XSS
Fixed in
Fixed in 6.7.1
CVSS
3.4 (low)
Published
2023-03-13
Title
Site Reviews < 6.6.0 - Contributor+ Stored XSS
Fixed in
Fixed in 6.6.0
CVSS
6.8 (medium)
Published
2023-03-13
Title
Site Reviews < 6.6.0 - Contributor+ Stored XSS
Fixed in
Fixed in 6.6.0
CVSS
6.8 (medium)
Published
2023-01-27
Title
Site Reviews < 6.4.0 - Unauthenticated CSV Injection
Fixed in
Fixed in 6.4.0
CVSS
5.8 (medium)
Published
2021-12-06
Title
Site Reviews < 5.17.3 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 5.17.3
CVSS
8.8 (high)
Published
2021-08-09
Title
Site Reviews < 5.13.1 - Admin+ Stored XSS
Fixed in
Fixed in 5.13.1
CVSS
3.4 (low)
Published
2018-05-28
Title
Site Reviews <= 2.15.2 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.15.3
CVSS
6.1 (medium)