Improper access control

2020-12-0820:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.6%

JSON

The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log Dive form because it fails to perform authorization checks. An attacker may leverage this issue to manipulate the integrity of dive logs.

CPENameOperatorVersion
divebookeq1.1.4

CPE	Name	Operator	Version
	divebook	eq	1.1.4

References

wordpress.org/plugins/divebook/

www.hooperlabs.xyz/disclosures/divebook.php