PatchTheCVEdivebook project vulnerabilities
Recent CVEs affecting divebook project products. 3 tracked.
divebook project has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-12-08. Highest priority: CVE-2020-14205 (score 45/100).
- CVE-2020-14207 MEDIUM 5.3 DOWNGRADE The DiveBook plugin 1.1.4 for WordPress was prone to a SQL injection within divelog.php, allowing unauthentica
- CVE-2020-14206 MEDIUM 6.1 DOWNGRADE The DiveBook plugin 1.1.4 for WordPress is prone to unauthenticated XSS within the filter function (via an arb
- CVE-2020-14205 MEDIUM 5.3 DOWNGRADE The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log Dive form because it fa
FAQ
How do I fix divebook project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is divebook project being exploited right now?
None of the tracked divebook project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which divebook project CVE should I patch first?
CVE-2020-14205 currently ranks highest (45/100): The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log Dive form because it fa.