Advisories · Technology

Sirv.

Every CVE that names Sirv among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-104389 CVE record

CVSS 8.5 High

WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability
- Sirv
- SQL injection
Not analysed yet 5 Oct 2026
CVE-2025-46233 CVE record

CVSS 6.5 Medium

WordPress Sirv plugin <= 7.5.3 - Cross Site Scripting (XSS) Vulnerability
- Sirv
- Cross-site scripting (XSS)
Not analysed yet 22 Apr 2025
CVE-2024-32959 CVE record

CVSS 8.8 High

WordPress Sirv plugin <= 7.2.2 - Arbitrary Option Update to Privilege Escalation vulnerability
- Sirv
- Privilege escalation
Not analysed yet 17 May 2024
CVE-2023-50898 CVE record

CVSS 5.4 Medium

WordPress Image Optimizer, Resizer and CDN – Sirv plugin <= 7.1.2 - Broken Access Control vulnerability
- Sirv
- Broken access control
Not analysed yet 15 Mar 2024
CVE-2024-27950 CVE record

CVSS 5.4 Medium

WordPress Sirv plugin <= 7.2.0 - Broken Access Control vulnerability
- Sirv
- Broken access control
Not analysed yet 1 Mar 2024
CVE-2024-27949 CVE record

CVSS 5.4 Medium

WordPress Sirv plugin <= 7.2.0 - Server Side Request Forgery (SSRF) vulnerability
- Sirv
- Server-side request forgery (SSRF)
Not analysed yet 1 Mar 2024