CVE-2018-0603: vulnerability in Gemini Labs Site Reviews
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.3%
Cross-site scripting vulnerability in Site Reviews versions prior to 2.15.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
Gemini Labs · Site ReviewsRelated CVEs — Gemini Labs Site Reviews
In the same product, most dangerous first.
CVE-2023-49832MEDIUMWordPress Site Reviews plugin <= 6.10.2 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2026-57318MEDIUMWordPress Site Reviews plugin <= 8.0.11 - Sensitive Data Exposure vulnerabilityEPSS 0.4%CVE-2024-29095MEDIUMWordPress Site Reviews plugin <= 6.11.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-73382HIGHWordPress Site Reviews plugin <= 8.2.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-94078HIGHWordPress Site Reviews plugin <= 8.3.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-110366MEDIUMWordPress Site Reviews plugin <= 8.3.4 - Broken Access Control vulnerabilityEPSS 0.2%