CVE-2024-54229

9.8

Critical

Published:16 Dec 2024

Last updated:17 Jun 2026

Source:audit@patchstack.com

Deferred

Weakness (CWE)

CWE-266CWE-266

CVSS Vector

v3.1

Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

View on MITRE Find PoC on GitHub

Description

Incorrect Privilege Assignment vulnerability in straightvisions GmbH SV100 Companion sv100-companion allows Privilege Escalation.This issue affects SV100 Companion: from n/a through <= 2.0.02.

References

audit@patchstack.com

https://patchstack.com/database/Wordpress/Plugin/sv100-companion/vulnerability/wordpress-sv100-companion-plugin-2-0-02-privilege-escalation-vulnerability?_s_id=cve