sirv vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20261

Newest CVEs

• CVE-2026-104389

  WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability

  Sirv · Sirv

  High8.5
• CVE-2024-10855

  Image Optimizer, Resizer and CDN – Sirv <= 7.3.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Option Deletion

  sirv · Image Optimizer, Resizer and CDN – Sirv

  High8.1
• CVE-2024-8964

  Image Optimizer, Resizer and CDN – Sirv <= 7.2.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

  sirv · Image Optimizer, Resizer and CDN – Sirv

  Medium6.4
• CVE-2024-8480

  Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload

  sirv · Image Optimizer, Resizer and CDN – Sirv

  High8.8
• CVE-2024-6392

  Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Authenticated(Subscriber+) Missing Authorization to Plugin Settings Update

  sirv · Image Optimizer, Resizer and CDN – Sirv

  Medium5.4
• CVE-2024-5853

  Image Optimizer, Resizer and CDN – Sirv <= 7.2.6 - Authenticated (Contributor+) Arbitrary File Upload

  sirv · Image Optimizer, Resizer and CDN – Sirv

  Critical9.9