Site Reviews vulnerabilities
We track 2 vulnerabilities in Site Reviews products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 10, 2026.
2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score
Latest Site Reviews vulnerabilities
- 8.1 High severity
Site Reviews: Deserialization of Untrusted Data
The Site Reviews WordPress plugin before 8.3.0 does not prevent request data from being deserialized, and derives the key protecting that data by padding out the site's WordPress nonce key, which makes the key publicly computable on installs where that key is
- 8.8 High severity
Site Reviews: Improper Neutralization of Input During Web Page Generation
The Site Reviews WordPress plugin before 7.2.5 does not properly sanitise and escape some of its Review fields, which could allow unauthenticated users to perform Stored XSS attacks