Skip to content
OpenAdvisories

Vendor

Sirv

6 known vulnerabilities.

Products

Image Optimizer, Resizer and CDN – Sirv 5 Sirv 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.5
    CVE-2026-104389

    WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5.

    Sirv Sirv
  • High 8.1
    CVE-2024-10855

    Image Optimizer, Resizer and CDN – Sirv <= 7.3.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Option Deletion

    The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to insufficient validation on the filename parameter of the sirv_upload_file_by_chunks() function and …

    Sirv Image Optimizer, Resizer and CDN – Sirv Web / CMS
  • High 8.8
    CVE-2024-8480

    Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload

    The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'sirv_save_prevented_sizes' function in all versions up to, and including, 7.2.7. This makes it possib…

    Sirv Image Optimizer, Resizer and CDN – Sirv Web / CMS