Image Optimizer, Resizer and CDN – Sirv

Уязвимости

• CVE-2024-32959нужен вход≤ 7.2.2

  WordPress Sirv plugin <= 7.2.2 - Arbitrary Option Update to Privilege Escalation vulnerability

  Высокий 8.8

• CVE-2023-50898нужен вход≤ 7.1.2

  WordPress Image Optimizer, Resizer and CDN – Sirv plugin <= 7.1.2 - Broken Access Control vulnerability

  Высокий 8.8

• CVE-2024-27950нужен вход≤ 7.2.0

  WordPress Sirv plugin <= 7.2.0 - Broken Access Control vulnerability

  Высокий 8.8

• CVE-2016-10950нужен вход

  The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter.

  Высокий 8.8

• CVE-2024-8480участник+≤ 7.2.7

  Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload

  Высокий 8.8

• CVE-2024-5853участник+≤ 7.2.6

  Image Optimizer, Resizer and CDN – Sirv <= 7.2.6 - Authenticated (Contributor+) Arbitrary File Upload

  Высокий 8.8

• CVE-2024-10855участник+≤ 7.3.0

  Image Optimizer, Resizer and CDN – Sirv <= 7.3.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Option Deletion

  Высокий 8.1

• CVE-2025-46233нужен вход≤ 7.5.3

  WordPress Sirv plugin <= 7.5.3 - Cross Site Scripting (XSS) Vulnerability

  Средний 5.4

• CVE-2024-6392подписчик+≤ 7.2.7

  Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Authenticated(Subscriber+) Missing Authorization to Plugin Settings Update

  Средний 5.4

• CVE-2024-27949нужен вход≤ 7.2.0

  WordPress Sirv plugin <= 7.2.0 - Server Side Request Forgery (SSRF) vulnerability

  Средний 5.4

• CVE-2024-8964автор+≤ 7.2.9

  Image Optimizer, Resizer and CDN – Sirv <= 7.2.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

  Средний 5.4