onyx --cves cve-2020-11738
CVE-2020-11738
- score
- <0.1
- cvss
- —
- epss
- 97.8%
- published
- —
- kev added
- 2021-11-03
- first seen
WordPress Snap Creek Duplicator plugin contains a file download vulnerability when an administrator creates a new copy of their site that allows an attacker to download the generated files from their Wordpress dashboard. This vulnerability affects Duplicator and Dulplicator Pro.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Added to CISA KEV
- Tracked by Onyx
- Nuclei template WordPress Duplicator 1.3.24 & 1.3.26 - Local File Inclusion
Nuclei template
A verified check exists — you can scan for this today, and so can everyone else.
- template
- WordPress Duplicator 1.3.24 & 1.3.26 - Local File Inclusion
- severity
- HIGH
- first seen
nuclei -id CVE-2020-11738 -u https://target.example