{"id":"CVE-2020-11738","vendor_project":"WordPress","product":"Snap Creek Duplicator Plugin","vulnerability_name":"WordPress Snap Creek Duplicator Plugin File Download Vulnerability","date_added":"2021-11-03","due_date":"2022-05-03","known_ransomware_use":"Unknown","short_description":"WordPress Snap Creek Duplicator plugin contains a file download vulnerability when an administrator creates a new copy of their site that allows an attacker to download the generated files from their Wordpress dashboard. This vulnerability affects Duplicator and Dulplicator Pro.","required_action":"Apply updates per vendor instructions.","cwes":"CWE-22","cvss_version":"3.1","cvss_severity":"HIGH","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","nvd_published":"2020-04-13","nvd_status":"Analyzed","epss":0.97822,"epss_percentile":0.99904,"cvss_score":7.5,"days_published_to_kev":569,"source":"https://data.cybermax-tools.workers.dev/cve/CVE-2020-11738","by":"CyberMax"}