CVE-2026-11801: WPAdverts <= 2.3.2 - Information Disclosure
HoneyLabs honeypots recorded 37 probes matching CVE-2026-11801 from 4 distinct source IP addresses in the last 7 days, of which 15 on interactive sensors. Severity is rated high.
4 sources probed for CVE-2026-11801 on the interactive sensors. None of them sent the exploit payload.
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-06, with 12. One address, 172.236.28.161, sent 43% of them. Over the last 90 days the sensors recorded 397 probes for it. Every probing client that negotiated TLS presented one JA4 fingerprint, t13i251000_b78ed14e2fd0_ab7e3b40a677.
Request paths that identify it
- /wp-json/wpadverts/v1/classifieds-types
Addresses probing it
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 172.236.28.161 | 16 | Akamai Connected Cloud | United Kingdom |
| 97.107.138.210 | 9 | Akamai Connected Cloud | United States |
| 50.116.58.253 | 8 | Akamai Connected Cloud | United States |
| 172.105.109.85 | 4 | Akamai Connected Cloud | Canada |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS63949 | Akamai Connected Cloud | 37 | 4 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 17 |
| United Kingdom | 16 |
| Canada | 4 |
Captured requests
- /wp-json/wpadverts/v1/classifieds-types
Requests the interactive sensors answered
- GET /wp-json/wpadverts/v1/classifieds-types
HTTP client fingerprints
- b11cun030_00040012_13ee3d34
CVE report
Open a specific CVE from the CVE tracker.