HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

CVE-2020-12800: WordPress Contact Form 7 <1.3.3.3 - Remote Code Execution

HoneyLabs honeypots recorded 6 probes matching CVE-2020-12800 from 1 distinct source IP address in the last 7 days. Severity is rated critical.

Request paths that identify it

  • /wp-content/uploads/wp_dndcf7_uploads/wpcf7-files/{{*}}.txt

Addresses probing it

Source IPProbesNetworkCountry
93.123.109.2146Techoff Srv LimitedBulgaria

Networks it comes from

ASNOrganisationProbesSource IPs
AS48090Techoff Srv Limited61

Where it comes from

CountryProbes
Bulgaria6

Captured requests

  • /wp-content/uploads/wp_dndcf7_uploads/wpcf7-files/3KenfD0rdiRORtFyzeTq37sGLkZ.txt
  • /wp-content/uploads/wp_dndcf7_uploads/wpcf7-files/3KSZIl4E3iQdkPSOvfnLksvRnVE.txt
  • /wp-content/uploads/wp_dndcf7_uploads/wpcf7-files/3Kboy7PpYUOcrmjNCBFRuRvaRlT.txt
  • /wp-content/uploads/wp_dndcf7_uploads/wpcf7-files/3Kht1IbdKJGrltMt7PIaIR1kNdH.txt

HTTP client fingerprints

  • b11cun040_00040013_608dab68

CVE report

CVE report

Open a specific CVE from the CVE tracker.