Image Optimizer, Resizer and CDN – Sirv vulnerabilities

3 known vulnerabilities in Image Optimizer, Resizer and CDN – Sirv from Sirv. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Image Optimizer, Resizer and CDN – Sirv: Authorization Bypass Through User-Controlled Key

  CVE-2024-10855Nov 20, 2024Sirv

  The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to insufficient validation on the filename parameter of the sirv_upload_file_by_chunks() function and l

• 8.8 High severity

  Image Optimizer, Resizer and CDN – Sirv: Missing Authorization

  CVE-2024-8480Sep 6, 2024Sirv

  The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'sirv_save_prevented_sizes' function in all versions up to, and including, 7.2.7. This makes it possibl

• 8.8 High severity

  Image Optimizer, Resizer and CDN – Sirv: Unrestricted Upload of File with Dangerous Type

  CVE-2024-5853Jun 19, 2024Sirv

  The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the sirv_upload_file_by_chanks AJAX action in all versions up to, and including, 7.2.6. This makes it possible for a