← WordPress Vulnerabilities
WordPress security by component

SV100 Companion

SV100 Companion is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Dec 16, 2024; the highest CVE/CNA score is 9.8.

Plugin slug: sv100-companion

CVE-2024-54229: SV100 Companion: Privilege escalation or authentication bypass

SV100 Companion is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.

PublishedDec 16, 2024
Safe version guidanceSee mitigation notes
Safe version
Dec 16, 2024 CVE-2024-54229
SV100 Companion: Privilege escalation or authentication bypass
SV100 Companion is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
See mitigation notes
CVE9.8
NVDPending
Dec 06, 2024 CVE-2024-12155
SV100 Companion: Privilege escalation or authentication bypass
SV100 Companion is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.
See mitigation notes
CVE9.8
NVDPending