Sploitus

5 exploited vulnerabilities in Site Reviews

Vulnerabilities with publicly known exploits

Vendors
WordPress, Unknown
With known exploits
5
Affected Geminilabs Site Reviews versions
< 7.0.0, 5.17.3, 5.13.1, 6.7.1

Vulnerabilities with exploits

Highest CVSS first — 4 of these already have exploit code on Sploitus

CVE-2024-3050 1 exploit
CVSS 9.1 CRITICAL 2024-05-29FIX AVAILABLE
Site Reviews < 7.0.0 - IP Spoofing
CVE-2025-1232
CVSS 8.8 HIGH 2025-03-19FIX AVAILABLE
CVE-2021-24973 1 exploit
CVSS 6.1 MEDIUM 2022-01-03FIX AVAILABLE
Site Reviews < 5.17.3 - Unauthenticated Stored Cross-Site Scripting
CVE-2021-24603 1 exploit
CVSS 5.4 MEDIUM 2021-09-06FIX AVAILABLE
Site Reviews < 5.13.1 - Authenticated Stored XSS
CVE-2023-1525 1 exploit
CVSS 4.8 MEDIUM 2023-05-02FIX AVAILABLE
Site Reviews < 6.7.1 - Admin+ Stored XSS