VYPR

Sv100 Companion

by WordPress

Source repositories

CVEs (2)

  • CVE-2024-54229CriDec 16, 2024
    risk 0.64cvss 9.8epss 0.00

    Incorrect Privilege Assignment vulnerability in straightvisions GmbH SV100 Companion sv100-companion allows Privilege Escalation.This issue affects SV100 Companion: from n/a through <= 2.0.02.

  • CVE-2024-12155CriDec 6, 2024
    risk 0.64cvss 9.8epss 0.01

    The SV100 Companion plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the settings_import() function in all versions up to, and including, 2.0.02. This makes it possible for…