Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

13 records

Vendor: sirv Clear all filters
TI-2026-67643 CVE-2026-104389 · GHSA-4486-36hf-vvwr

Blind SQL injection in WordPress Sirv plugin

Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00258 Published 2026-10-05 No fix listed CWE-89
TI-2025-28985 CVE-2025-46233 · GHSA-qq89-8329-mrxh

WordPress Sirv plugin <= 7.5.3 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sirv CDN and Image Hosting Sirv sirv allows Stored XSS.This issue affects Sirv: from n/a through <= 7.5.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00227 Published 2025-04-22 No fix listed CWE-79
TI-2024-10063 CVE-2024-10855 · GHSA-5v32-g299-xh57

Authorization bypass in sirv Image Optimizer, Resizer and CDN – Sirv

Priority LOW 36

The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to insufficient validation on the filename parameter of the sir…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00544 Published 2024-11-20 No fix listed CWE-639
TI-2024-08324 CVE-2024-8964 · GHSA-6cpm-g48h-c92x

Cross-site scripting in sirv Image Optimizer, Resizer and CDN – Sirv

Priority LOW 28

The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 7.2.9 due to insufficient input sanitization and ou…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00342 Published 2024-10-08 No fix listed CWE-79
TI-2024-07862 CVE-2024-8480 · GHSA-cjpq-64wj-gmhm

Missing authorization in sirv Image Optimizer, Resizer and CDN – Sirv

Priority MEDIUM 42

The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'sirv_save_prevented_sizes' function in all versions up to, and…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00852 Published 2024-09-06 No fix listed CWE-862
TI-2024-05934 CVE-2024-6392 · GHSA-3pr5-7mf5-rc69

Missing authorization in sirv Image Optimizer, Resizer and CDN – Sirv

Priority LOW 24

The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized plugin settings modification due to missing capability checks on the plugin functions in all versions up to, and including, 7…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0031 Published 2024-07-11 No fix listed CWE-862
TI-2024-05428 CVE-2024-5853 · GHSA-4x4x-4g44-6g6p

Image Optimizer, Resizer and CDN – Sirv <= 7.2.6 - Authenticated (Contributor+) Arbitrary File Upload

Priority MEDIUM 44

The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the sirv_upload_file_by_chanks AJAX action in all versions up to, and includ…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00787 Published 2024-06-19 No fix listed CWE-434
TI-2022-03766 CVE-2022-4119 · GHSA-2r86-vxrq-rr24

Image Optimizer, Resizer and CDN < 6.8.1 - Admin+ Stored XSS

Priority MEDIUM 55

The Image Optimizer, Resizer and CDN WordPress plugin before 6.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks ev…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00493 Published 2023-01-02 Fixed in 6.8.1