Image Optimizer, Resizer and CDN – Sirv

Vulnerabilities 15Slug sirvLatest version 8.2.2WordPress.org →

Minimum safe version

7.5.4

Update to 7.5.4 or later to address 15 fixable vulnerabilities

Latest available8.2.2 ✓

Medium 5.4

2025-04-22< 7.5.4

CVE-2025-46233

CVE Patchstack Wordfence

High 8.1

2024-11-20< 7.3.1

CVE-2024-10855

CVE Wordfence Patchstack

Medium 5.4

2024-10-08< 7.3.0

CVE-2024-8964

CVE Patchstack Wordfence

High 8.8

2024-09-06< 7.2.8

CVE-2024-8480

CVE

N/A

2024-08-21< 7.2.8

Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload

Wordfence

N/A

2024-08-22< 7.2.8

WordPress Sirv Plugin <= 7.2.7 is vulnerable to Arbitrary File Upload

Patchstack

Medium 5.4

2024-07-11< 7.2.8

CVE-2024-6392

CVE Patchstack Wordfence

High 8.8

2024-06-19< 7.2.7

CVE-2024-5853

CVE Wordfence Patchstack

High 8.8

2024-05-17< 7.2.3

CVE-2024-32959

CVE Patchstack Wordfence

Medium 5.4

2024-03-01< 7.2.1

CVE-2024-27950

CVE Wordfence Patchstack WPScan

Medium 5.4

2024-03-01< 7.2.1

CVE-2024-27949

CVE Wordfence Patchstack WPScan

Medium 5.4

2024-12-26< 7.1.3

WordPress Sirv Plugin <= 7.1.2 is vulnerable to Broken Access Control

Patchstack CVE Wordfence WPScan

Medium 4.8

2023-12-09< 6.8.1

WordPress Sirv Plugin < 6.8.1 is vulnerable to Cross Site Scripting (XSS)

Patchstack CVE Wordfence WPScan

N/A

2016-11-10< 1.3.2

WordPress Sirv Plugin <= 1.3.1 - Authenticated SQL Injection

Patchstack

High 8.8

2019-09-13< 1.3.2

CVE-2016-10950

CVE Wordfence WPScan