Exploited Vulnerabilities DailyCVE-2020-11738: WordPress Snap Creek Duplicator Plugin
EPSS97.8%No. 278 of 1739 in KEV
CVE year2020~1 yrs before listing
Same vendor in KEV6
Same product1
| Field | Value |
|---|---|
| Vendor | WordPress |
| Product | Snap Creek Duplicator Plugin |
| Name | WordPress Snap Creek Duplicator Plugin File Download Vulnerability |
| Added to KEV | 2021-11-03 |
| US federal due date | 2022-05-03 |
| Ransomware use | Unknown |
| CWE | CWE-22 |
CISA description
WordPress Snap Creek Duplicator plugin contains a file download vulnerability when an administrator creates a new copy of their site that allows an attacker to download the generated files from their Wordpress dashboard. This vulnerability affects Duplicator and Dulplicator Pro.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A WordPress Snap Creek Duplicator Plugin vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2021-11-03.