Sirv vulnerabilities
We track 4 vulnerabilities in Sirv products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 5, 2026.
Latest Sirv vulnerabilities
- 8.5 High severity
Sirv: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5.
- 8.1 High severity
Image Optimizer, Resizer and CDN – Sirv: Authorization Bypass Through User-Controlled Key
The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to insufficient validation on the filename parameter of the sirv_upload_file_by_chunks() function and l
- 8.8 High severity
Image Optimizer, Resizer and CDN – Sirv: Missing Authorization
The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'sirv_save_prevented_sizes' function in all versions up to, and including, 7.2.7. This makes it possibl
- 8.8 High severity
Image Optimizer, Resizer and CDN – Sirv: Unrestricted Upload of File with Dangerous Type
The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the sirv_upload_file_by_chanks AJAX action in all versions up to, and including, 7.2.6. This makes it possible for a