7.5Alta KEV

CVE-2020-11738WordPress Snap Creek Duplicator Plugin File Download Vulnerability

awesomemotive duplicator Publicada: 2020-04-14 00:20 (hace 6 años)

Explotación conocida — WordPress Snap Creek Duplicator Plugin File Download Vulnerability

CISA confirmó el 03.11.2021 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 03.05.2022.

Acción requerida: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2020-11738

Descripción

The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init.

Debilidad (CWE): CWE-22

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Fabricante	Producto	Versiones
awesomemotive	duplicator	< 1.3.28

Referencias y parches

https://snapcreek.com/duplicator/docs/changelog/?lite Release NotesVendor Advisory
https://www.wordfence.com/blog/2020/02/active-attack-on-recently-patched-duplicator-plugin-vulnerability-affe… ExploitThird Party Advisory
https://cwe.mitre.org/data/definitions/23.html Not Applicable
http://packetstormsecurity.com/files/160621/WordPress-Duplicator-1.3.26-Directory-Traversal-File-Read.html ExploitThird Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/164533/WordPress-Duplicator-1.3.26-Arbitrary-File-Read.html ExploitThird Party AdvisoryVDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-11738 US Government Resource

Coincidencias CPE (NVD) (2)

cpe:2.3:a:awesomemotive:duplicator:*:*:*:*:lite:wordpress:*:* < 1.3.28
cpe:2.3:a:awesomemotive:duplicator:*:*:*:*:pro:wordpress:*:* < 3.8.7.1

Puntuación CVSS

7.5Alta

Fuente: mitre · CVSS 3.0

Complejidad: Baja
Vector de ataque: Red
Disponibilidad: Ninguno
Confidencialidad: Alto
Integridad: Ninguno
Privilegios: Ninguno
Alcance: Sin cambio
Interacción del usuario: Ninguna

CVSS:3.0/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N

Todas las puntuaciones (4)

cna	CVSS 3.0	7.5Alta
nvd	CVSS 3.1	7.5Alta
cve@mitre.org	CVSS 3.0	7.5Alta
nvd	CVSS 2.0	5.0Media

EPSS (probabilidad de explotación en 30 días)

97.82%

superior al 100 % de todas las CVE

Evaluación de CISA (SSVC)

Explotación: active
Automatizable: yes
Impacto técnico: partial

Cronología

ID reservado2020-04-13
Publicada2020-04-14 00:20
Llegó a IP-DB2026-10-24 23:35
Añadida a KEV2021-11-03
Última actualización2026-06-17 05:50

Asignada por (CNA): mitre
Estado en NVD: Analyzed

Ver en la fuente: CVE.org · NVD

Reciba un aviso cuando estos productos tengan una vulnerabilidad nueva

Activar alertas por correo

Gratis · con cuenta · se desactiva cuando quiera

CVE recientes del mismo producto — WordPress plugins & themes

7.5Alta

CVE-2026-82663 hace 28 minutos

Give - Peer-to-Peer <= 2.9.5 - Authorization Bypass to Team Modification and Media Upload

GiveWP Give - Peer-to-Peer

The Give - Peer-to-Peer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.9.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthe…

7.5Alta

CVE-2026-82568 hace 28 minutos

Give - Peer-to-Peer <= 2.9.3 - Unauthenticated SQL Injection via 'sort' Parameter

GiveWP Give - Peer-to-Peer

The Give - Peer-to-Peer plugin for WordPress is vulnerable to time-based SQL Injection via the 'sort' parameter in all versions up to, and including, 2.9.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the e…

Sin puntuación

CVE-2026-124671 hace 4 horas

Burst Statistics < 3.7.5 - Unauthenticated Analytics Disclosure Beyond Shared Report Date Range

Burst Statistics

The Burst Statistics WordPress plugin before 3.7.5 does not enforce a shared report's date range on the analytics it serves to the report's share link, allowing anyone holding the link to read the report's statistics for any period the site retains rather th…

Sin puntuación

CVE-2026-124673 hace 4 horas

Burst Statistics < 3.7.5 - Unauthenticated Draft and Private Post Title Disclosure via Forged Page View

Burst Statistics

The Burst Statistics WordPress plugin before 3.7.5 does not check that a reported page view belongs to published content, nor check post status before listing post titles and links in its public statistics output, allowing unauthenticated attackers to disclo…

Sin puntuación

CVE-2026-127048 hace 4 horas

Lazy Blocks < 3.0.0 - Unauthenticated RCE

Custom Block Builder

The Custom Block Builder WordPress plugin before 3.0.0 does not properly deny unauthorised requests to its REST routes, as its permission checks return a non-error response that WordPress treats as granted, allowing unauthenticated users to execute arbitrary…

Sin puntuación

CVE-2026-110989 hace 4 horas

RegistrationMagic 5.2.3.1 - 6.1.0.3 - Unauthenticated Non-Admin User Profile Modification via Form Submission

RegistrationMagic

The RegistrationMagic WordPress plugin before 6.1.0.4 does not verify ownership of the submitted email address before updating the associated WordPress user account, allowing unauthenticated attackers to overwrite the profile fields of arbitrary non-administ…