CyberSecBulletin

Straightvisions vulnerabilities

We track 2 vulnerabilities in Straightvisions products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 16, 2024.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Straightvisions vulnerabilities

  • 9.8 Critical severity

    SV100 Companion: Incorrect Privilege Assignment

    CVE-2024-54229Straightvisions

    Incorrect Privilege Assignment vulnerability in straightvisions GmbH SV100 Companion sv100-companion allows Privilege Escalation.This issue affects SV100 Companion: from n/a through <= 2.0.02.

  • 9.8 Critical severity

    SV100 Companion: Missing Authorization

    CVE-2024-12155Matthias-reuterEPSS 1.19%

    The SV100 Companion plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the settings_import() function in all versions up to, and including, 2.0.02. This makes it po