Divebook Project Divebook — known CVE vulnerabilities

Every CVE whose affected-product data names Divebook Project Divebook, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2020-14206 — CVSS 6.1 (medium): The DiveBook plugin 1.1.4 for WordPress is prone to unauthenticated XSS within the filter function (via an arbitrary parameter).
• CVE-2020-14205 — CVSS 5.3 (medium): The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log Dive form because it fails to perform authorization…
• CVE-2020-14207 — CVSS 5.3 (medium): The DiveBook plugin 1.1.4 for WordPress was prone to a SQL injection within divelog.php, allowing unauthenticated users to retrieve data…