Live › vulnerability › CVE-2026-110366
Go to dashboardThe Site Reviews WordPress plugin by Gemini Labs has a missing authorization check that allows access control to be bypassed. An attacker who can reach the site may be able to perform actions or read data they should not be allowed to.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the Site Reviews WordPress plugin version 8.3.4 or earlier. The sources do not describe which configurations or roles are required, so the exposure scope is unknown. Sites that do not have the plugin installed are not affected.
No product ranges from the sources yet.
wp plugin get site-reviews --field=version8.3.48.3.4, as published by the vendor (fixed version not stated in the sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through 8.3.4.
This page as .md · .json · in your agent: get_signal("CVE-2026-110366")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.