{"id":"CVE-2020-11738","aliases":["EUVD-2020-4080","GHSA-wfr8-hp36-c4v2"],"status":"published","title":"The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1)...","description":"The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.97822,"percentile":0.99906,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-22"],"published":"2020-04-13T21:20:00Z","modified":"2026-06-17T02:50:42Z","kev":{"date_added":"2021-11-03","due_date":"2022-05-03","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2021-11-03"},{"source":"kev","since":"2021-11-03"}],"exploits":[{"source":"exploitdb","id":"EDB-50420","title":"Wordpress Plugin Duplicator 1.3.26 - Unauthenticated Arbitrary File Read","type":"webapps","platform":"php","date":"2021-10-18","url":"https://www.exploit-db.com/exploits/50420"},{"source":"pocgithub","id":"raghu66669999/wordpress-snapcreek","title":"raghu66669999/wordpress-snapcreek","date":"2024-06-15","url":"https://github.com/raghu66669999/wordpress-snapcreek"},{"source":"metasploit","id":"auxiliary/scanner/http/wp_duplicator_file_read","title":"WordPress Duplicator File Read Vulnerability","type":"auxiliary","date":"2020-02-19","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/http/wp_duplicator_file_read"},{"source":"nuclei","id":"CVE-2020-11738","title":"WordPress Duplicator 1.3.24 \u0026 1.3.26 - Local File Inclusion","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11738.yaml"}],"products":[{"vendor":"awesomemotive","product":"duplicator"},{"vendor":"wordpress","product":"snap creek duplicator plugin"}],"references":[{"url":"https://snapcreek.com/duplicator/docs/changelog/?lite","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://www.wordfence.com/blog/2020/02/active-attack-on-recently-patched-duplicator-plugin-vulnerability-affects-over-1-million-sites/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://cwe.mitre.org/data/definitions/23.html","tags":["x_refsource_MISC","x_transferred","Not Applicable"]},{"url":"http://packetstormsecurity.com/files/160621/WordPress-Duplicator-1.3.26-Directory-Traversal-File-Read.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/164533/WordPress-Duplicator-1.3.26-Arbitrary-File-Read.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-11738","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11738"},{"url":"https://www.wordfence.com/blog/2020/02/active-attack-on-recently-patched-duplicator-plugin-vulnerability-affects-over-1-million-sites"},{"url":"https://github.com/advisories/GHSA-wfr8-hp36-c4v2"}],"sources":{"cve":[{"id":"CVE-2020-11738","description":"The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init.","status":"published","published":"2020-04-13T21:20:00Z","modified":"2026-01-12T20:20:55.122Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N","level":"high","assessor":"cna"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:35:57.352161Z"}],"euvd":[{"id":"EUVD-2020-4080","description":"The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init.","status":"published","published":"2020-04-13T21:20:00Z","modified":"2026-01-12T20:20:55Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N","level":"high"}],"exploited_since":"2021-11-03","updated_at":"2026-11-02T19:48:53.22038Z"}],"ghsa":[{"id":"GHSA-wfr8-hp36-c4v2","title":"The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1)...","description":"The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init.","status":"published","published":"2022-05-24T17:14:11Z","modified":"2025-10-22T00:31:52Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:04:04.176931Z"}],"kev":[{"id":"CVE-2020-11738","title":"WordPress Snap Creek Duplicator Plugin File Download Vulnerability","description":"WordPress Snap Creek Duplicator plugin contains a file download vulnerability when an administrator creates a new copy of their site that allows an attacker to download the generated files from their Wordpress dashboard. This vulnerability affects Duplicator and Dulplicator Pro.","cwes":["CWE-22"],"kev":{"date_added":"2021-11-03","due_date":"2022-05-03","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:17.050017Z"}],"nvd":[{"id":"CVE-2020-11738","description":"The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init.","status":"published","published":"2020-04-13T22:15:10.66Z","modified":"2026-06-17T02:50:42.807Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:05:57.678762Z"}]}}