CVE-2020-11738highunder attackCWE-22

CVE-2020-11738

Published · Updated

Follow this CVE+ Monitor Snap Creek Duplicator Plugin

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 7.5epss 98%
from disclosure to weapon553 days
Published on NVDApr 13
1st PoC+553d
metasploitFeb 19
CISA KEV+569d
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

A vulnerability in the Duplicator WordPress plugin allows attackers to download files from anywhere on the server by manipulating file paths. This could expose sensitive files like database backups or configuration files containing passwords.

Technical detail

CWE-22 Directory Traversal vulnerability in Duplicator plugin (< 1.3.28) and Duplicator Pro (< 3.8.7.1) affecting the duplicator_download and duplicator_init actions. Unauthenticated attackers can bypass path restrictions using ../ sequences in the file parameter to access arbitrary files on the server. Impact includes confidentiality breach through unauthorized file access.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init.
CVSS:3.0/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.