← Back

Divebook Project

divebook_project

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Divebook
divebook
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-14207
1Divebook Project
1Divebook
Jun 17, 2026
Dec 8, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
The DiveBook plugin 1.1.4 for WordPress was prone to a SQL injection within divelog.php, allowing unauthenticated users to retrieve data from the database via the divelog.php filter_diver parameter.
CVE-2020-14206
1Divebook Project
1Divebook
Jun 17, 2026
Dec 8, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The DiveBook plugin 1.1.4 for WordPress is prone to unauthenticated XSS within the filter function (via an arbitrary parameter).
CVE-2020-14205
1Divebook Project
1Divebook
Jun 17, 2026
Dec 8, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log Dive form because it fails to perform authorization checks. An attacker may leverage this issue to manipulate the integrity of dive l...Show more
The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log Dive form because it fails to perform authorization checks. An attacker may leverage this issue to manipulate the integrity of dive logs.Show less