Missing Authorization
6 records50%First: 2023. Latest: 2024.
Plugin security history
Image Optimizer, Resizer and CDN – Sirv Vulnerability History & Security Timeline
The Wordfence Intelligence dataset currently contains 12 vulnerability records associated with Image Optimizer, Resizer and CDN – Sirv, published between 2016 and 2025.
Dataset last synchronized: 2026-08-03 00:31:25 UTC
At a glance
Security Snapshot
12Total records
2Critical
3High
7Medium
0Low
0Informational
12Patched records
0Currently marked unpatched
2016-11-10First disclosure
2025-04-22Latest disclosure
12 of 12CVE coverage
Use this history
Check and watch Image Optimizer, Resizer and CDN – Sirv.
A history record does not establish whether the version installed on your website is affected. Enter the exact version in the checker, or add this software to a private Critical/High alert watchlist.
Year-by-Year Timeline
| Year | Records | Relative volume |
|---|---|---|
| 2016 | 1 | |
| 2022 | 1 | |
| 2023 | 1 | |
| 2024 | 8 | |
| 2025 | 1 |
Severity Breakdown
| Severity | Records | Share |
|---|---|---|
| Critical | 2 | 16.7% |
| High | 3 | 25% |
| Medium | 7 | 58.3% |
Vulnerability-Type Breakdown
Cross-Site Scripting
3 records25%First: 2022. Latest: 2025.
SQL Injection
1 record8.3%First: 2016. Latest: 2016.
Other
1 record8.3%First: 2024. Latest: 2024.
Arbitrary File Upload
1 record8.3%First: 2024. Latest: 2024.
Patch Status
- Patched
- 12
- Currently marked unpatched
- 0
- Unknown status
- 0
Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.
Latest Known Patched Versions
7.5.47.3.17.3.07.2.87.2.77.2.37.2.17.1.36.8.11.3.2
Affected-Version History
Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.
| Affected range | Vulnerability | Published | Patched version | Severity |
|---|---|---|---|---|
*-7.5.3 | Sirv <= 7.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting | April 22, 2025 | 7.5.4 | Medium |
*-7.3.0 | Image Optimizer, Resizer and CDN – Sirv <= 7.3.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Option Deletion | November 19, 2024 | 7.3.1 | High |
*-7.2.9 | Image Optimizer, Resizer and CDN – Sirv <= 7.2.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload | October 7, 2024 | 7.3.0 | Medium |
*-7.2.7 | Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload | August 21, 2024 | 7.2.8 | High |
*-7.2.7 | Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Authenticated(Subscriber+) Missing Authorization to Plugin Settings Update | July 11, 2024 | 7.2.8 | Medium |
*-7.2.6 | Image Optimizer, Resizer and CDN – Sirv <= 7.2.6 - Authenticated (Contributor+) Arbitrary File Upload | June 18, 2024 | 7.2.7 | Critical |
*-7.2.2 | Sirv <= 7.2.2 - Missing Authorization to Arbitrary Options Update | April 23, 2024 | 7.2.3 | Critical |
*-7.2.0 | Image Optimizer, Resizer and CDN – Sirv <= 7.2.0 - Authenticated (Subscriber+) Server-Side Request Forgery | March 1, 2024 | 7.2.1 | Medium |
*-7.2.0 | Image Optimizer, Resizer and CDN – Sirv <= 7.2.0 - Missing Authorization | March 1, 2024 | 7.2.1 | Medium |
*-7.1.2 | Sirv <= 7.1.2 - Missing Authorization via sirv_disconnect | December 26, 2023 | 7.1.3 | Medium |
*-6.8.0 | Image Optimizer, Resizer and CDN – Sirv <= 6.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting | December 9, 2022 | 6.8.1 | Medium |
[*, 1.3.2) | Image Optimizer, Resizer and CDN – Sirv < 1.3.2 - SQL Injection | November 10, 2016 | 1.3.2 | High |
Selected source records
Latest Records
MediumCVE-2025-46233
Sirv <= 7.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: April 22, 2025
- Affected versions
- *-7.5.3
- Patched versions
- 7.5.4
HighCVE-2024-10855
Image Optimizer, Resizer and CDN – Sirv <= 7.3.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Option Deletion
Published: November 19, 2024
- Affected versions
- *-7.3.0
- Patched versions
- 7.3.1
MediumCVE-2024-8964
Image Optimizer, Resizer and CDN – Sirv <= 7.2.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Published: October 7, 2024
- Affected versions
- *-7.2.9
- Patched versions
- 7.3.0
HighCVE-2024-8480
Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload
Published: August 21, 2024
- Affected versions
- *-7.2.7
- Patched versions
- 7.2.8
MediumCVE-2024-6392
Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Authenticated(Subscriber+) Missing Authorization to Plugin Settings Update
Published: July 11, 2024
- Affected versions
- *-7.2.7
- Patched versions
- 7.2.8
CriticalCVE-2024-5853
Image Optimizer, Resizer and CDN – Sirv <= 7.2.6 - Authenticated (Contributor+) Arbitrary File Upload
Published: June 18, 2024
- Affected versions
- *-7.2.6
- Patched versions
- 7.2.7
CriticalCVE-2024-32959
Sirv <= 7.2.2 - Missing Authorization to Arbitrary Options Update
Published: April 23, 2024
- Affected versions
- *-7.2.2
- Patched versions
- 7.2.3
MediumCVE-2024-27950
Image Optimizer, Resizer and CDN – Sirv <= 7.2.0 - Missing Authorization
Published: March 1, 2024
- Affected versions
- *-7.2.0
- Patched versions
- 7.2.1
Highest-Severity Records
CriticalCVE-2024-5853
Image Optimizer, Resizer and CDN – Sirv <= 7.2.6 - Authenticated (Contributor+) Arbitrary File Upload
Published: June 18, 2024
- Affected versions
- *-7.2.6
- Patched versions
- 7.2.7
CriticalCVE-2024-32959
Sirv <= 7.2.2 - Missing Authorization to Arbitrary Options Update
Published: April 23, 2024
- Affected versions
- *-7.2.2
- Patched versions
- 7.2.3
HighCVE-2024-8480
Image Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload
Published: August 21, 2024
- Affected versions
- *-7.2.7
- Patched versions
- 7.2.8
HighCVE-2016-10950
Image Optimizer, Resizer and CDN – Sirv < 1.3.2 - SQL Injection
Published: November 10, 2016
- Affected versions
- [*, 1.3.2)
- Patched versions
- 1.3.2
HighCVE-2024-10855
Image Optimizer, Resizer and CDN – Sirv <= 7.3.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Option Deletion
Published: November 19, 2024
- Affected versions
- *-7.3.0
- Patched versions
- 7.3.1
MediumCVE-2024-8964
Image Optimizer, Resizer and CDN – Sirv <= 7.2.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Published: October 7, 2024
- Affected versions
- *-7.2.9
- Patched versions
- 7.3.0
MediumCVE-2025-46233
Sirv <= 7.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: April 22, 2025
- Affected versions
- *-7.5.3
- Patched versions
- 7.5.4
MediumCVE-2024-27949
Image Optimizer, Resizer and CDN – Sirv <= 7.2.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Published: March 1, 2024
- Affected versions
- *-7.2.0
- Patched versions
- 7.2.1
Need help reviewing an exposed WordPress website?
Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.
Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.
Data Source, Attribution and Methodology
This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.