Sirv

Products

ProductCVEsExploitedLatest
Image Optimizer, Resizer and CDN – Sirv5–Nov 20, 2024
Sirv1–Oct 5, 2026

Exploited and recent CVEs

  • CVE-2026-104389 High 8.5 WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability 0.3%
  • CVE-2024-10855 High 8.1 Image Optimizer, Resizer and CDN – Sirv <= 7.3.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Option Deletion 0.5%
  • CVE-2024-8964 Medium 6.4 Image Optimizer, Resizer and CDN – Sirv <= 7.2.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
  • CVE-2024-8480 High 8.8 Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload 0.9%
  • CVE-2024-6392 Medium 5.4 Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Authenticated(Subscriber+) Missing Authorization to Plugin Settings Update 0.3%
  • CVE-2024-5853 Critical 9.9 Image Optimizer, Resizer and CDN – Sirv <= 7.2.6 - Authenticated (Contributor+) Arbitrary File Upload 0.8%