CVE-2026-110366: WordPress Site Reviews plugin <= 8.3.4 - Broken Access Control vulnerability

Q: Which installations are affected?

The issue affects Gemini Labs Site Reviews versions through 8.3.4. The affected version range is listed as n/a through 8.3.4, so the earliest affected version is not specified.

Q: Can an attacker exploit this without an account or user interaction?

Yes. The supplied CVSS vector indicates network exploitation with low attack complexity, no privileges required, and no user interaction required.

Q: What is the expected impact?

The supplied CVSS vector indicates an integrity impact only, with no stated confidentiality or availability impact. The severity is medium, with a CVSS score of 5.3.

Published Oct 16, 2026

Updated

Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through 8.3.4.

Affected Software

1 affected component

Gemini Labs Site Reviews<=8.3.4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Site Reviews plugin to a version that resolves this vulnerability.
Fixed in 8.3.5

Event History

Oct 16, 2026

CVE Published

via MITRE·06:54 AM

Data Sourced

via MITRE·06:54 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

The issue affects Gemini Labs Site Reviews versions through 8.3.4. The affected version range is listed as n/a through 8.3.4, so the earliest affected version is not specified.

Can an attacker exploit this without an account or user interaction?

Yes. The supplied CVSS vector indicates network exploitation with low attack complexity, no privileges required, and no user interaction required.

What is the expected impact?

The supplied CVSS vector indicates an integrity impact only, with no stated confidentiality or availability impact. The severity is medium, with a CVSS score of 5.3.

CVE-2026-110366: WordPress Site Reviews plugin <= 8.3.4 - Broken Access Control vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which installations are affected?

Can an attacker exploit this without an account or user interaction?

What is the expected impact?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

Can an attacker exploit this without an account or user interaction?

What is the expected impact?