VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Jul 11, 2024· Updated Apr 8, 2026

CVE-2024-6392

CVE-2024-6392

Description

The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized plugin settings modification due to missing capability checks on the plugin functions in all versions up to, and including, 7.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change the connected Sirv account to an attacker-controlled one.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Sirv/Sirv2 versions
    cpe:2.3:a:sirv:sirv:*:*:*:*:*:wordpress:*:*+ 1 more
    • cpe:2.3:a:sirv:sirv:*:*:*:*:*:wordpress:*:*range: <7.2.8
    • (no CPE)range: <=7.2.7
  • WordPress/Sirvwp-canonicalize

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.