CVE-2020-14205: WordPress plugin vulnerability

The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log Dive form because it fails to perform authorization checks. An attacker may leverage this issue to manipulate the integrity of dive logs.

How to mitigate CVE-2020-14205

Time needed: 5 minutes.

Follow the instructions, as they will assist you in mitigating the WordPress vulnerability that been reported in CVE-2020-14205.

  1. Install the latest version of WordPress

    Navigate to the official WordPress website and download the latest version of WordPress. The latest version contains the CVE-2020-14205 fix.
    Update to the latest version

  2. Perform a vulnerability assessment

    Perform a scan on your WordPress environment(s), and check for vulnerabilities. Verify if CVE-2020-14205 has been mitigated.

  3. Utilize the references

    The CVE-2020-14205 references have been provided for a reason. Utilize these references and make sure that you are correctly informed.

References

  • wordpress.org/plugins/divebook/#developers
  • www.hooperlabs.xyz/disclosures/divebook.php
  • Share this information

    Related Posts