CVE-2020-14205

Name of the Vulnerable Software and Affected Versions DiveBook plugin version 1.1.4

Description The issue is related to improper access control in the Log Dive form of the DiveBook plugin for WordPress. It fails to perform authorization checks, which can be exploited by an attacker to manipulate the integrity of dive logs.

Recommendations For version 1.1.4, consider disabling access to the Log Dive form until a patch is available to prevent unauthorized manipulation of dive logs.