Vulnerabilities

TI-2020-11128 CVE-2020-14207 · GHSA-54c6-8fc4-h2j7

The DiveBook plugin 1.1.4 for WordPress was prone to a SQL injection within divelog.php…

LOW 27

The DiveBook plugin 1.1.4 for WordPress was prone to a SQL injection within divelog.php, allowing unauthenticated users to retrieve data from the database via the divelog.php filter_diver parameter.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0144 Published 2020-12-08 No fix listed CWE-89

TI-2020-11127 CVE-2020-14206 · GHSA-phcj-55fg-4r29

The DiveBook plugin 1.1.4 for WordPress is prone to unauthenticated XSS within the filter…

LOW 29

The DiveBook plugin 1.1.4 for WordPress is prone to unauthenticated XSS within the filter function (via an arbitrary parameter).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0096 Published 2020-12-08 No fix listed CWE-79

TI-2020-11126 CVE-2020-14205 · GHSA-mjqr-j4x8-38w5

The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log…

LOW 26

The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log Dive form because it fails to perform authorization checks.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01153 Published 2020-12-08 No fix listed CWE-862

Vulnerabilities

Filters

The DiveBook plugin 1.1.4 for WordPress was prone to a SQL injection within divelog.php…

The DiveBook plugin 1.1.4 for WordPress is prone to unauthenticated XSS within the filter…

The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log…