SV100 Companion vulnerabilities

2 known vulnerabilities in SV100 Companion from Straightvisions. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  SV100 Companion: Incorrect Privilege Assignment

  CVE-2024-54229Dec 16, 2024Straightvisions

  Incorrect Privilege Assignment vulnerability in straightvisions GmbH SV100 Companion sv100-companion allows Privilege Escalation.This issue affects SV100 Companion: from n/a through <= 2.0.02.

• 9.8 Critical severity

  SV100 Companion: Missing Authorization

  CVE-2024-12155Dec 6, 2024Matthias-reuterEPSS 1.19%

  The SV100 Companion plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the settings_import() function in all versions up to, and including, 2.0.02. This makes it po