Skip to main content

CVE-2020-11738

Description

The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init.

NVD
Severity: HIGH
CVE ID: CVE-2020-11738
CVSS Score: 7.5
CVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

MITRE
Severity: HIGH
CVE ID: CVE-2020-11738
CVSS Score: 7.5
CVSS Metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Refrence: NVD MITRE

Proof Of Concept

Nuclei Templates for CVE-2020-11738

Refrence: Project Discovery GitHub

Description
Proof Of Concept