GCVE - cpe:2.3:a:unknown:site_reviews:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:site_reviews:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Unknown (`668ca391-a6cc-5e33-879b-83885214de33`)
Product	Site Reviews (`7878420f-4c79-5a5c-bc9f-7c9a173dffde`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-1232`	vulnerable	2026-06-08 07:08:35.894305	Site Reviews < 7.2.5 - Unauthenticated Stored XSS The Site Reviews WordPress plugin before 7.2.5 does not properly sanitise and escape some of its Review fields, which could allow unauthenticated users to perform Stored XSS attacks Published: 2025-03-19T06:00:02.199Z Updated: 2025-03-19T14:36:35.550Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/c4ea8357-ddd7-48ac-80c9-15b924715b14/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-3050`	vulnerable	2026-06-08 06:41:52.304255	Site Reviews < 7.0.0 - IP Spoofing The Site Reviews WordPress plugin before 7.0.0 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to bypass IP-based blocking Published: 2024-05-29T06:00:01.923Z Updated: 2024-08-01T19:32:42.587Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/04c1581e-fd36-49d4-8463-b49915d4b1ac/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1525`	vulnerable	2026-06-08 05:52:36.051300	Site Reviews < 6.7.1 - Admin+ Stored XSS The Site Reviews WordPress plugin before 6.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Published: 2023-05-02T07:04:49.421Z Updated: 2025-01-30T15:02:37.909Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/4ae6bf90-b100-4bb5-bdd7-8acdbd950596	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-24973`	vulnerable	2026-06-08 05:30:39.725084	Site Reviews < 5.17.3 - Unauthenticated Stored Cross-Site Scripting The Site Reviews WordPress plugin before 5.17.3 does not sanitise and escape the site-reviews parameter of the glsr_action AJAX action (available to unauthenticated and any authenticated users), allowing them to perform Cross-Site Scripting attacks against logged in admins viewing the Tool dashboard of the plugin Published: 2022-01-03T12:49:09.000Z Updated: 2024-08-03T19:49:14.017Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/0118f245-0e6f-44c1-9bdb-5b3a5d2403d6 https://plugins.trac.wordpress.org/changeset/2629821	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-24603`	vulnerable	2026-06-08 05:30:38.847295	Site Reviews < 5.13.1 - Authenticated Stored XSS The Site Reviews WordPress plugin before 5.13.1 does not sanitise some of its Review Details when adding a review as an admin, which could allow them to perform Cross-Site Scripting attacks when the unfiltered_html is disallowed Published: 2021-09-06T11:09:33.000Z Updated: 2024-08-03T19:35:20.266Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/72aea0e5-1fa7-4827-a173-59982202d323	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.