Sirv
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Image Optimizer, Resizer and CDN – Sirv | 5 | – | Nov 20, 2024 |
| Sirv | 1 | – | Oct 5, 2026 |
Exploited and recent CVEs
- CVE-2026-104389 WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability 0.3%
- CVE-2024-10855 Image Optimizer, Resizer and CDN – Sirv <= 7.3.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Option Deletion 0.5%
- CVE-2024-8964 Image Optimizer, Resizer and CDN – Sirv <= 7.2.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
- CVE-2024-8480 Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload 0.9%
- CVE-2024-6392 Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Authenticated(Subscriber+) Missing Authorization to Plugin Settings Update 0.3%
- CVE-2024-5853 Image Optimizer, Resizer and CDN – Sirv <= 7.2.6 - Authenticated (Contributor+) Arbitrary File Upload 0.8%