coldbraid

CVE-2020-11738 WordPress Snap Creek Duplicator Plugin

WordPress Snap Creek Duplicator plugin contains a file download vulnerability when an administrator creates a new copy of their site that allows an attacker to download the generated files from their Wordpress dashboard. This vulnerability affects Duplicator and Dulplicator Pro.

CVSS
not scored

CWE-22

On CISA’s exploited list

WordPress Snap Creek Duplicator Plugin File Download Vulnerability

Added
2021-11-03
Federal patch deadline
2022-05-03
Ransomware use
not known