CVE Watch—

CVE-2020-11738

WordPress Snap Creek Duplicator Plugin File Download Vulnerability

CVSS

—

No CVSS

EPSS

97.8%

p100

KEV

YES

Nov 3, 2021

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

97.8%EPSS · 30 days97.8%

2026-09-162026-10-14

KEV catalog record

Product

WordPress / Snap Creek Duplicator Plugin

Vulnerability

WordPress Snap Creek Duplicator Plugin File Download Vulnerability

Added to KEV

Nov 3, 2021

Remediate by

May 3, 2022

Known ransomware use

Summary description

WordPress Snap Creek Duplicator plugin contains a file download vulnerability when an administrator creates a new copy of their site that allows an attacker to download the generated files from their Wordpress dashboard. This vulnerability affects Duplicator and Dulplicator Pro.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-11738

Related CVEs

No related CVEs by CWE or product.