Sirv vulnerabilities

Products

• Sirv 12
• Image Optimizer, Resizer And Cdn – Sirv 5
• Image Optimizer\, Resizer And Cdn 2

Newest

• sirv WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability CVE-2026-104389 8.5 HighOctober 5, 2026
• sirv WordPress Sirv plugin <= 7.5.3 - Cross Site Scripting (XSS) Vulnerability CVE-2025-46233 6.5 MediumApril 22, 2025
• sirv image optimizer, resizer and cdn – sirv, sirv +1 more Image Optimizer, Resizer and CDN – Sirv <= 7.3.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Option Deletion CVE-2024-10855 8.1 HighNovember 20, 2024
• sirv image optimizer, resizer and cdn – sirv, sirv +1 more Image Optimizer, Resizer and CDN – Sirv <= 7.2.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVE-2024-8964 6.4 MediumOctober 8, 2024
• sirv image optimizer, resizer and cdn – sirv, sirv +1 more Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload CVE-2024-8480 8.8 HighSeptember 6, 2024
• sirv image optimizer, resizer and cdn – sirv, sirv +1 more Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Authenticated(Subscriber+) Missing Authorization to Plugin Settings Update CVE-2024-6392 5.4 MediumJuly 11, 2024
• sirv image optimizer, resizer and cdn – sirv, sirv, sirv image optimizer\, resizer and cdn +2 more Image Optimizer, Resizer and CDN – Sirv <= 7.2.6 - Authenticated (Contributor+) Arbitrary File Upload CVE-2024-5853 9.9 CriticalJune 19, 2024
• sirv WordPress Sirv plugin <= 7.2.2 - Arbitrary Option Update to Privilege Escalation vulnerability CVE-2024-32959 8.8 HighMay 17, 2024
• sirv WordPress Image Optimizer, Resizer and CDN – Sirv plugin <= 7.1.2 - Broken Access Control vulnerability CVE-2023-50898 5.4 MediumMarch 15, 2024
• sirv WordPress Sirv plugin <= 7.2.0 - Broken Access Control vulnerability CVE-2024-27950 5.4 MediumMarch 1, 2024
• sirv WordPress Sirv plugin <= 7.2.0 - Server Side Request Forgery (SSRF) vulnerability CVE-2024-27949 5.4 MediumMarch 1, 2024
• unknown image optimizer, resizer and cdn, sirv image optimizer\, resizer and cdn +1 more Image Optimizer, Resizer and CDN < 6.8.1 - Admin+ Stored XSS CVE-2022-4119 4.8 MediumJanuary 2, 2023
• sirv The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter. CVE-2016-10950 8.8 HighSeptember 13, 2019