Approved changes feed: RSS · Atom

cpe:2.3:a:divebook_project:divebook:1.1.4:*:*:*:*:wordpress:*:*

part: a version: 1.1.4 update: *

VendorDivebook Project (2e8f294d-64df-5197-8885-680e59443994)
ProductDivebook (cd977c57-33eb-58bb-8c21-0dc402763be2)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/wpplugins/divebook purl2cpe 2026-06-01 10:15:14.064649

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-14207 vulnerable 2026-06-08 05:19:22.703133 Details available
The DiveBook plugin 1.1.4 for WordPress was prone to a SQL injection within divelog.php, allowing unauthenticated users to retrieve data from the database via the divelog.php filter_diver parameter.
Published: 2020-12-08T19:50:21.000Z
Updated: 2024-08-04T12:39:36.182Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14206 vulnerable 2026-06-08 05:19:22.702675 Details available
The DiveBook plugin 1.1.4 for WordPress is prone to unauthenticated XSS within the filter function (via an arbitrary parameter).
Published: 2020-12-08T19:48:27.000Z
Updated: 2024-08-04T12:39:36.210Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14205 vulnerable 2026-06-08 05:19:22.701936 Details available
The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log Dive form because it fails to perform authorization checks. An attacker may leverage this issue to manipulate the integrity of dive logs.
Published: 2020-12-08T19:46:28.000Z
Updated: 2024-08-04T12:39:36.203Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.