https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T23:13:44.681283+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-282348 EUVD-2026-282348 2026-10-07T23:13:44.683463+00:00 EUVD-2026-282348 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8480 fkie_cve-2024-8480 2026-10-07T23:13:44.683520+00:00

The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'sirv_save_prevented_sizes' function in all versions up to, and including, 7.2.7. This makes it possible for authenticated attackers, with Contributor-level access and above, to exploit the 'sirv_upload_file_by_chunks_callback' function, which lacks proper file type validation, allowing attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

 https://cve.radiocsirt.org/vuln/ghsa-cjpq-64wj-gmhm GHSA-cjpq-64wj-gmhm 2026-10-07T23:13:44.683570+00:00

The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'sirv_save_prevented_sizes' function in all versions up to, and including, 7.2.7. This makes it possible for authenticated attackers, with Contributor-level access and above, to exploit the 'sirv_upload_file_by_chunks_callback' function, which lacks proper file type validation, allowing attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.