CVE-2026-103340: WordPress Site Reviews plugin <= 8.3.2 - Broken Access Control vulnerability

Q: Which deployments are affected?

The issue affects Gemini Labs Site Reviews versions through 8.3.2. The available data does not identify a fixed version or any unaffected configuration.

Q: Does exploitation require authentication or user interaction?

No. The provided vector indicates network exploitation with low attack complexity, no privileges required, and no user interaction required.

Q: What is the likely security impact?

The supplied CVSS vector indicates an integrity impact only, rated Low. It does not indicate confidentiality or availability impact.

Published Oct 1, 2026

Updated

Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through 8.3.2.

Affected Software

1 affected component

Gemini Labs Site Reviews<=8.3.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Site Reviews plugin to a version that resolves this vulnerability.
Fixed in 8.3.3

Event History

Oct 1, 2026

CVE Published

via MITRE·12:26 PM

Data Sourced

via MITRE·12:26 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

The issue affects Gemini Labs Site Reviews versions through 8.3.2. The available data does not identify a fixed version or any unaffected configuration.

Does exploitation require authentication or user interaction?

No. The provided vector indicates network exploitation with low attack complexity, no privileges required, and no user interaction required.

What is the likely security impact?

The supplied CVSS vector indicates an integrity impact only, rated Low. It does not indicate confidentiality or availability impact.

CVE-2026-103340: WordPress Site Reviews plugin <= 8.3.2 - Broken Access Control vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which deployments are affected?

Does exploitation require authentication or user interaction?

What is the likely security impact?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

Does exploitation require authentication or user interaction?

What is the likely security impact?