PatchTheCVEdivebook vulnerabilities and fixes
Recent CVEs affecting divebook, with upgrade or downgrade steps. 3 tracked.
divebook has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-12-08. Highest priority: CVE-2020-14205 (score 45/100).
- CVE-2020-14207 MEDIUM 5.3 DOWNGRADE The DiveBook plugin 1.1.4 for WordPress was prone to a SQL injection within divelog.php, allowing unauthentica
- CVE-2020-14206 MEDIUM 6.1 DOWNGRADE The DiveBook plugin 1.1.4 for WordPress is prone to unauthenticated XSS within the filter function (via an arb
- CVE-2020-14205 MEDIUM 5.3 DOWNGRADE The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log Dive form because it fa
FAQ
How do I fix divebook vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is divebook being exploited right now?
None of the tracked divebook CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which divebook CVE should I patch first?
CVE-2020-14205 currently ranks highest (45/100): The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log Dive form because it fa.