Skip to content
OpenAdvisories

Vendor

Sirv

6 known vulnerabilities.

Products

Image Optimizer, Resizer and CDN – Sirv 5 Sirv 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-8964

    Image Optimizer, Resizer and CDN – Sirv <= 7.2.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 7.2.9 due to insufficient input sanitization and output escaping. This makes it possible f…

    Sirv Image Optimizer, Resizer and CDN – Sirv Web / CMS
  • Medium 5.4
    CVE-2024-6392

    Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Authenticated(Subscriber+) Missing Authorization to Plugin Settings Update

    The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized plugin settings modification due to missing capability checks on the plugin functions in all versions up to, and including, 7.2.7. This makes it possible for authen…

    Sirv Image Optimizer, Resizer and CDN – Sirv Web / CMS