Browse CVEs

MEDIUM 5.4 CVE-2025-46233 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sirv CDN and Image Hosting Sirv sirv allows Sto… Sirv 7.5.4+ Fix from $1,6002025-04-22 HIGH 8.1 CVE-2024-10855 The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of serv… Sirv 7.3.1+ Fix from $1,9502024-11-20 MEDIUM 5.4 CVE-2024-8964 The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up… Sirv 7.3.0+ Fix from $1,6002024-10-08 HIGH 8.8 CVE-2024-8480 The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check… Sirv 7.2.8+ Fix from $1,9502024-09-06 MEDIUM 5.4 CVE-2024-6392 The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized plugin settings modification due to missing capability… Sirv 7.2.8+ Fix from $1,6002024-07-11 HIGH 8.8 CVE-2024-5853 The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the s… Sirv 7.2.7+ Fix from $1,9502024-06-19 HIGH 8.8 CVE-2024-32959 Incorrect Privilege Assignment vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through <= 7.2.2. Sirv 7.2.3+ Fix from $1,9502024-05-17 HIGH 8.8 CVE-2023-50898 Missing Authorization vulnerability in sirv.Com Sirv.This issue affects Sirv: from n/a through 7.1.2. Sirv after 7.1.2 Fix from $1,9502024-03-15 HIGH 8.8 CVE-2024-27950 Missing Authorization vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through <= 7.2.0. Sirv 7.2.1+ Fix from $1,9502024-03-01 MEDIUM 5.4 CVE-2024-27949 Server-Side Request Forgery (SSRF) vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through <= 7.2.0. Sirv 7.2.1+ Fix from $1,6002024-03-01 HIGH 8.8 CVE-2016-10950 The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter. Sirv 1.3.2+ Fix from $1,9502019-09-13