CVE-2020-11738—WordPress Snap Creek Duplicator Plugin File Download Vulnerability

漏洞名称

WordPress Snap Creek Duplicator Plugin File Download Vulnerability

描述

WordPress Snap Creek Duplicator plugin contains a file download vulnerability when an administrator creates a new copy of their site that allows an attacker to download the generated files from their Wordpress dashboard. This vulnerability affects Duplicator and Dulplicator Pro.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2020-11738

相关 CWE

• CWE-22