Plugin icon

Image Optimizer, Resizer and CDN – Sirv

sirv

Vulnerabilities:

12

Last Updated:

June 10, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2025-04-22
Title
Sirv < 7.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 7.5.4
CVSS
6.4 (medium)
Published
2024-11-19
Title
Image Optimizer, Resizer and CDN – Sirv < 7.3.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Option Deletion
Fixed in
Fixed in 7.3.1
CVSS
8.1 (high)
Published
2024-10-07
Title
Image Optimizer, Resizer and CDN – Sirv < 7.3.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Fixed in
Fixed in 7.3.0
CVSS
6.4 (medium)
Published
2024-08-21
Title
Image Optimizer, Resizer and CDN – Sirv < 7.2.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload
Fixed in
Fixed in 7.2.8
CVSS
8.8 (high)
Published
2024-07-11
Title
Image Optimizer, Resizer and CDN – Sirv < 7.2.8 - Authenticated(Subscriber+) Missing Authorization to Plugin Settings Update
Fixed in
Fixed in 7.2.8
CVSS
5.4 (medium)
Published
2024-06-18
Title
Image Optimizer, Resizer and CDN – Sirv < 7.2.7 - Authenticated (Contributor+) Arbitrary File Upload
Fixed in
Fixed in 7.2.7
CVSS
9.9 (critical)
Published
2024-04-23
Title
Sirv < 7.2.3 - Missing Authorization to Arbitrary Options Update
Fixed in
Fixed in 7.2.3
CVSS
9.8 (critical)
Published
2024-03-01
Title
Image Optimizer, Resizer and CDN – Sirv < 7.2.1 - Missing Authorization
Fixed in
Fixed in 7.2.1
CVSS
4.3 (medium)
Published
2024-03-01
Title
Image Optimizer, Resizer and CDN – Sirv < 7.2.1 - Authenticated (Subscriber+) Server-Side Request Forgery
Fixed in
Fixed in 7.2.1
CVSS
6.4 (medium)
Published
2023-12-26
Title
Sirv < 7.1.3 - Missing Authorization via sirv_disconnect
Fixed in
Fixed in 7.1.3
CVSS
4.3 (medium)
Published
2022-12-09
Title
Image Optimizer, Resizer and CDN < 6.8.1 - Admin+ Stored XSS
Fixed in
Fixed in 6.8.1
CVSS
3.4 (low)
Published
2016-11-10
Title
Sirv <= 1.3.1 - Authenticated SQL Injection
Fixed in
Fixed in 1.3.2
CVSS
8.8 (high)