{"cve_id":"CVE-2026-4020","title":"Gravity SMTP WordPress Plugin - Sensitive Information Exposure","severity":"HIGH","actively_exploited":false,"patterns":["/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings","/wp-json/gravitysmtp/v1/tests/mock-data"],"events":5,"unique_ips":5,"actors":[{"ip":"185.177.72.70","events":1,"country_code":"FR","country":"France","org":"Bucklog SARL","rdns":"","scanner_tag":null},{"ip":"185.177.72.54","events":1,"country_code":"FR","country":"France","org":"Bucklog SARL","rdns":"","scanner_tag":null},{"ip":"185.177.72.205","events":1,"country_code":"FR","country":"France","org":"Bucklog SARL","rdns":"","scanner_tag":null},{"ip":"209.50.180.217","events":1,"country_code":"GB","country":"United Kingdom","org":"3xK Tech GmbH","rdns":"","scanner_tag":null},{"ip":"185.177.72.22","events":1,"country_code":"FR","country":"France","org":"Bucklog SARL","rdns":"","scanner_tag":null}],"top_asns":[{"asn":211590,"org":"Bucklog SARL","events":4,"ips":4},{"asn":200373,"org":"3xK Tech GmbH","events":1,"ips":1}],"fingerprints":{"ja4h":["ge11nn14en_068ebe3632ec"],"ja4":[]},"sample_paths":["http://<HONEYPOT>/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings","/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings"],"timeline":[{"day":"2026-07-04","events":3,"ips":3},{"day":"2026-07-07","events":2,"ips":2}],"window_hours":168}