CVE-2026-4020: Gravity SMTP WordPress Plugin - Sensitive Information Exposure

HoneyLabs honeypots recorded 18 probes matching CVE-2026-4020 from 5 distinct source IP addresses in the last 7 days. Severity is rated HIGH.

Request paths that identify it

  • /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings
  • /wp-json/gravitysmtp/v1/tests/mock-data

Addresses probing it

Source IPProbesNetworkCountry
93.123.109.2147Techoff Srv LimitedBulgaria
172.105.109.856Akamai Connected CloudCanada
172.236.28.1612Akamai Connected CloudUnited Kingdom
50.116.58.2532Akamai Connected CloudUnited States
45.148.10.741Techoff Srv LimitedThe Netherlands

Networks it comes from

ASNOrganisationProbesSource IPs
AS63949Akamai Connected Cloud103
AS48090Techoff Srv Limited82

Captured requests

  • /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings

CVE report

CVE report

Open a specific CVE from the CVE tracker.