sirv

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

sirv records in CISA KEV

No sirv vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Sirv 11 records MEDIUM Image Optimizer, Resizer And Cdn 1 record MEDIUM

Records

13 records

TI-2022-03766 CVE-2022-4119 · GHSA-2r86-vxrq-rr24

Image Optimizer, Resizer and CDN < 6.8.1 - Admin+ Stored XSS

MEDIUM 55

The Image Optimizer, Resizer and CDN WordPress plugin before 6.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks ev…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00493 Published 2023-01-02 Fixed in 6.8.1

TI-2024-05428 CVE-2024-5853 · GHSA-4x4x-4g44-6g6p

Image Optimizer, Resizer and CDN – Sirv <= 7.2.6 - Authenticated (Contributor+) Arbitrary File Upload

MEDIUM 44

The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the sirv_upload_file_by_chanks AJAX action in all versions up to, and includ…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00787 Published 2024-06-19 No fix listed CWE-434

TI-2024-07862 CVE-2024-8480 · GHSA-cjpq-64wj-gmhm

Missing authorization in sirv Image Optimizer, Resizer and CDN – Sirv

MEDIUM 42

The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'sirv_save_prevented_sizes' function in all versions up to, and…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00852 Published 2024-09-06 No fix listed CWE-862

TI-2016-08988 CVE-2016-10950 · GHSA-grmp-c34h-26pj

The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter.

MEDIUM 42

The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01944 Published 2019-09-13 No fix listed CWE-89

TI-2024-21826 CVE-2024-32959 · GHSA-pf2v-x6jh-mcxq

WordPress Sirv plugin <= 7.2.2 - Arbitrary Option Update to Privilege Escalation vulnerability

MEDIUM 40

Incorrect Privilege Assignment vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through <= 7.2.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0043 Published 2024-05-17 No fix listed CWE-266

TI-2023-27801 CVE-2023-50898 · GHSA-23rp-qg5j-5vm7

WordPress Image Optimizer, Resizer and CDN – Sirv plugin <= 7.1.2 - Broken Access Control vulnerability

MEDIUM 40

Missing Authorization vulnerability in sirv.Com Sirv.This issue affects Sirv: from n/a through 7.1.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00433 Published 2024-03-15 No fix listed CWE-862

TI-2024-18553 CVE-2024-27950 · GHSA-79pv-8q24-469w

WordPress Sirv plugin <= 7.2.0 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through <= 7.2.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00372 Published 2024-03-01 No fix listed CWE-862

TI-2026-67643 CVE-2026-104389 · GHSA-4486-36hf-vvwr

Blind SQL injection in WordPress Sirv plugin

LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00258 Published 2026-10-05 No fix listed CWE-89

TI-2024-10063 CVE-2024-10855 · GHSA-5v32-g299-xh57

Authorization bypass in sirv Image Optimizer, Resizer and CDN – Sirv

LOW 36

The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to insufficient validation on the filename parameter of the sir…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00544 Published 2024-11-20 No fix listed CWE-639

TI-2025-28985 CVE-2025-46233 · GHSA-qq89-8329-mrxh

WordPress Sirv plugin <= 7.5.3 - Cross Site Scripting (XSS) Vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sirv CDN and Image Hosting Sirv sirv allows Stored XSS.This issue affects Sirv: from n/a through <= 7.5.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00227 Published 2025-04-22 No fix listed CWE-79

TI-2024-08324 CVE-2024-8964 · GHSA-6cpm-g48h-c92x

Cross-site scripting in sirv Image Optimizer, Resizer and CDN – Sirv

LOW 28

The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 7.2.9 due to insufficient input sanitization and ou…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00342 Published 2024-10-08 No fix listed CWE-79

TI-2024-18552 CVE-2024-27949 · GHSA-j8jw-w4g4-q965

WordPress Sirv plugin <= 7.2.0 - Server Side Request Forgery (SSRF) vulnerability

LOW 24

Server-Side Request Forgery (SSRF) vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through <= 7.2.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00342 Published 2024-03-01 No fix listed CWE-918

TI-2024-05934 CVE-2024-6392 · GHSA-3pr5-7mf5-rc69

Missing authorization in sirv Image Optimizer, Resizer and CDN – Sirv

LOW 24

The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized plugin settings modification due to missing capability checks on the plugin functions in all versions up to, and including, 7…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0031 Published 2024-07-11 No fix listed CWE-862

Open these records in search →

Critical	1
High	7
Medium	5
Low	0
No CVSS	0