Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: straightvisions GmbH Clear all filters
TI-2024-36318 CVE-2024-54229 · GHSA-wq3x-7666-hhgc

WordPress SV100 Companion plugin <= 2.0.02 - Privilege Escalation vulnerability

Priority HIGH 82

Incorrect Privilege Assignment vulnerability in straightvisions GmbH SV100 Companion sv100-companion allows Privilege Escalation.This issue affects SV100 Companion: from n/a through <= 2.0.02.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00447 Published 2024-12-16 No fix listed CWE-266
TI-2024-34781 CVE-2024-51877 · GHSA-548p-gmg2-4cqq

WordPress SV Forms plugin <= 2.0.05 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in straightvisions GmbH SV Forms sv-forms allows DOM-Based XSS.This issue affects SV Forms: from n/a through <= 2.0.05.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00328 Published 2024-11-19 No fix listed CWE-79