Image Optimizer, Resizer and CDN – Sirv

Vulnerabilities

• CVE-2024-8480

  Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload

  High 8.8

• CVE-2024-5853

  Image Optimizer, Resizer and CDN – Sirv <= 7.2.6 - Authenticated (Contributor+) Arbitrary File Upload

  High 8.8

• CVE-2024-32959

  WordPress Sirv plugin <= 7.2.2 - Arbitrary Option Update to Privilege Escalation vulnerability

  High 8.8

• CVE-2023-50898

  WordPress Image Optimizer, Resizer and CDN – Sirv plugin <= 7.1.2 - Broken Access Control vulnerability

  High 8.8

• CVE-2024-27950

  WordPress Sirv plugin <= 7.2.0 - Broken Access Control vulnerability

  High 8.8

• CVE-2016-10950

  The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter.

  High 8.8

• CVE-2024-10855

  Image Optimizer, Resizer and CDN – Sirv <= 7.3.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Option Deletion

  High 8.1

• CVE-2025-46233

  WordPress Sirv plugin <= 7.5.3 - Cross Site Scripting (XSS) Vulnerability

  Medium 5.4

• CVE-2024-8964

  Image Optimizer, Resizer and CDN – Sirv <= 7.2.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

  Medium 5.4

• CVE-2024-6392

  Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Authenticated(Subscriber+) Missing Authorization to Plugin Settings Update

  Medium 5.4

• CVE-2024-27949

  WordPress Sirv plugin <= 7.2.0 - Server Side Request Forgery (SSRF) vulnerability

  Medium 5.4