CVE-2020-11738
WordPress Snap Creek Duplicator Plugin
WordPress Snap Creek Duplicator Plugin File Download Vulnerability
What it is
WordPress Snap Creek Duplicator plugin contains a file download vulnerability when an administrator creates a new copy of their site that allows an attacker to download the generated files from their Wordpress dashboard. This vulnerability affects Duplicator and Dulplicator Pro.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other WordPress entries on the list
- WordPress Core WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability CVE-2026-119977 · Nov 3, 2026
- Core WordPress Core Remote File Inclusion Vulnerability CVE-2026-87902 · Sep 25, 2026
- Core WordPress Core Interpretation Conflict Vulnerability CVE-2026-63030 · Jul 21, 2026
- Core WordPress Core SQL Injection Vulnerability CVE-2026-60137 · Jul 21, 2026
- File Manager Plugin WordPress File Manager Plugin Remote Code Execution Vulnerability CVE-2020-25213 · Nov 3, 2021
- Social Warfare Plugin WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability CVE-2019-9978 · Nov 3, 2021