WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Site Reviews

Site Reviews is the best free reviews plugin. It integrates with WooCommerce & SureCart and works just like reviews on Amazon, Tripadvisor, and Yelp.

15Reported vulnerabilities
9.1Highest CVSS score
8.2.1Latest version
60,000+Active installs

What to do now

Update Site Reviews to 8.2.1 or later. 15 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 11, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2025-1232 High 8.8 1.9% Before 7.2.5 7.2.5 March 19, 2025
CVE-2024-3050 Critical 9.1 0.6% Before 7.0.0 7.0.0 May 29, 2024
CVE-2021-24973 Medium 6.1 1.3% Before 5.17.3 5.17.3 January 3, 2022
CVE-2021-24603 Medium 5.4 0.6% Before 5.13.1 5.13.1 September 6, 2021
CVE-2023-1525 Medium 4.8 0.5% Before 6.7.1 6.7.1 May 2, 2023
CVE-2026-73382 High 7.2 0.2% 8.2.0 and earlier 8.2.1 August 14, 2026
CVE-2022-46801 Medium 6.5 0.7% 6.2.0 and earlier 6.4.0 January 27, 2023
CVE-2024-29095 Medium 6.4 0.3% 6.11.6 and earlier 6.11.7 March 15, 2024
CVE-2024-2293 Medium 6.4 0.5% 0 to 6.11.4 (inclusive) 6.11.7 March 13, 2024
CVE-2023-27629 Medium 6.4 0.4% 6.5.1 and earlier 6.6.0 March 13, 2023
CVE-2023-27612 Medium 6.4 0.4% 6.5.1 and earlier 6.6.0 March 13, 2023
CVE-2018-0603 Medium 6.1 1.3% Before 2.15.3 2.15.3 May 28, 2018
CVE-2023-49832 Medium 5.4 0.5% Before 6.10.3 6.10.3 August 29, 2023
CVE-2023-27625 Medium 5.4 0.4% 6.5.0 and earlier 6.6.0 March 13, 2023
CVE-2026-57318 Medium 4.3 0.4% 8.0.11 and earlier 8.0.12 June 26, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.