Sirv
6 CVEs across 3 Sirv products. Browse Sirv vulnerabilities, severities, and proof-of-concept exploits.
Sirv products with known CVEs
Sirv CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-46233 | Medium | 6.5 | 2025-04-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sirv CDN and Image Hosting Sirv sirv allows Stored XSS.Th… |
CVE-2024-10855 | High | 8.1 | 2024-11-20 | The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to… |
CVE-2024-8964 | Medium | 6.4 | 2024-10-08 | The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and i… |
CVE-2024-8480 | High | 8.8 | 2024-09-06 | The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 's… |
CVE-2024-6392 | Medium | 5.4 | 2024-07-11 | The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized plugin settings modification due to missing capability checks on… |
CVE-2024-5853 | Critical | 9.9 | 2024-06-19 | The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the sirv_upload… |
CVE-2024-32959 | High | 8.8 | 2024-05-17 | Incorrect Privilege Assignment vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through <= 7.2.2. |
CVE-2023-50898 | Medium | 5.4 | 2024-03-15 | Missing Authorization vulnerability in sirv.Com Sirv.This issue affects Sirv: from n/a through 7.1.2. |
CVE-2024-27950 | Medium | 5.4 | 2024-03-01 | Missing Authorization vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through <= 7.2.0. |
CVE-2024-27949 | Medium | 5.4 | 2024-03-01 | Server-Side Request Forgery (SSRF) vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through <= 7.2.0. |
CVE-2022-4119 | Medium | 4.8 | 2023-01-02 | The Image Optimizer, Resizer and CDN WordPress plugin before 6.8.1 does not sanitise and escape some of its settings, which could allow high privilege users su… |
CVE-2016-10950 | High | 8.8 | 2019-09-13 | The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter. |