Approved changes feed: RSS · Atom

cpe:2.3:a:snapcreek:duplicator:*:*:*:*:pro:wordpress:*:*

part: a version: * update: *

VendorSnapcreek (cd6b8699-469b-5942-acac-39eee88f5ce5)
ProductDuplicator (364126c6-b6a6-5c0c-9f46-3c2b016b0743)
Edition*
Language*
Software editionpro
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wpplugins/duplicator purl2cpe 2026-06-01 10:17:11.175497

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-11738 vulnerable 2026-06-08 05:17:54.251025 Details available
HIGH (7.5)
The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init.
Published: 2020-04-13T21:20:00.000Z
Updated: 2026-01-12T20:20:55.122Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.