VULNERABILITY INTELLIGENCE

CVE-2020-11738

CVSS score7.5 HIGH

EPSS probability97.82%

CISA KEVKnown exploited vulnerability

Published2020-04-13

Last modified2026-06-17

Known Exploited Vulnerability

WordPress Snap Creek Duplicator Plugin File Download Vulnerability

Vendor / product: WordPress / Snap Creek Duplicator Plugin

Description

The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init.