{"ip":"185.254.197.231","total_events":3391,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"49 exploit-path hits","confidence":"high","network_type":null,"why":["49 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 5,313,599 bytes: sustained payload delivery, not a single opportunistic request.","Held a session open for 121s, against a median of well under a second."],"engagement":{"level":"payload","label":"Sustained payload, held open","detail":"5,313,599 bytes sent, longest session 121s","bytes_sent":5313599,"session_seconds":121,"persistent":true}},"first_seen":"2026-07-27T16:50:39","last_seen":"2026-09-02T07:48:14","events_24h":0,"events_7d":0,"geo":{"country_code":"UA","country_name":"Ukraine","region":"Kyiv City","city":"Kyiv","lat":50.458,"lon":30.5303,"asn":30860,"org":"Virtual Systems LLC"},"source_domain":"server1.nondomain.local","known_scanners":[],"scanner_tag":null,"cve_matches":[{"cve_id":"CVE-2019-3396","title":"Atlassian Confluence Server - Path Traversal","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/rest/tinymce/1/macro/preview"},{"cve_id":"CVE-2022-22963","title":"Spring Cloud - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/functionRouter"},{"cve_id":"CVE-2023-6875","title":"WordPress POST SMTP Mailer <= 2.8.7 - Authorization Bypass","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-json/post-smtp/v1/get-log"},{"cve_id":"CVE-2024-37014","title":"Langflow <= 1.0.12 - Remote Code Execution","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/v1/custom_component"},{"cve_id":"CVE-2020-35234","title":"SMTP WP Plugin Directory Listing","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-content/plugins/easy-wp-smtp"},{"cve_id":"CVE-2022-1711","title":"draw.io < 18.0.5 - Server Side Request Forgery (SSRF)","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/proxy?url=http:"},{"cve_id":"CVE-2024-44000","title":"LiteSpeed Cache <= 6.4.1 - Sensitive Information Exposure","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-content/debug.log"},{"cve_id":"CVE-2026-4020","title":"Gravity SMTP WordPress Plugin - Sensitive Information Exposure","severity":"HIGH","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings"}],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":3376},{"port":80,"proto":"tcp","label":"HTTP","count":15}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i311000_e8f1e7e78f70_d41ae481755e","t13i251000_b78ed14e2fd0_ab7e3b40a677","t13i3111h1_e8f1e7e78f70_b26ce05bbdd6","t13i3111h1_e8f1e7e78f70_d41ae481755e"],"tls_ja3":["78f0dc5ac5b19daf131a133cfdee9691","755cbaaa441626ab9e759e8982278df5","416eca07dcaad72dec6f76d1277b3eff","c12b4ccd5320bbb380ca1a9df90f771d"],"ja4h":["ge11nn0600_30d3780c3555","po11nn0600_e990ab6c2a6b","ge11nn0400_cf1edba2959c","he11nn0400_cf1edba2959c","po11nn0800_2bd860c61c4c"]},"fingerprint_peers":{"t13i311000_e8f1e7e78f70_d41ae481755e":1158,"t13i251000_b78ed14e2fd0_ab7e3b40a677":85,"t13i3111h1_e8f1e7e78f70_b26ce05bbdd6":14,"t13i3111h1_e8f1e7e78f70_d41ae481755e":50,"ge11nn0600_30d3780c3555":36,"po11nn0600_e990ab6c2a6b":7,"ge11nn0400_cf1edba2959c":207,"he11nn0400_cf1edba2959c":4,"po11nn0800_2bd860c61c4c":2},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36","Mozilla/5.0 (compatible; MonSt3r/1.0)","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36","Mozilla/5.0","Mozilla/5.0 (Windows NT 10.0; Win64; x64)"],"timeline":[{"date":"2026-07-27","count":3},{"date":"2026-09-01","count":25},{"date":"2026-09-02","count":3363}],"recent_events":[{"timestamp":"2026-09-02T07:48:14","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-json/easy-wp-smtp/v1/settings","summary":"","payload_hex":"474554202f77702d6a736f6e2f656173792d77702d736d74702f76312f73657474696e677320485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"c12b4ccd5320bbb380ca1a9df90f771d","session":"96e63607-22af-41fe-a10a-50d98295ec47","seq":60,"duration_ms":19221,"bytes_in":9252,"bytes_out":4800},{"timestamp":"2026-09-02T07:48:13","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-json/fluent-smtp/v1/settings","summary":"","payload_hex":"474554202f77702d6a736f6e2f666c75656e742d736d74702f76312f73657474696e677320485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"c12b4ccd5320bbb380ca1a9df90f771d","session":"96e63607-22af-41fe-a10a-50d98295ec47","seq":59,"duration_ms":19082,"bytes_in":9081,"bytes_out":4720},{"timestamp":"2026-09-02T07:48:13","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-json/wp-mail-smtp/v1/settings","summary":"","payload_hex":"474554202f77702d6a736f6e2f77702d6d61696c2d736d74702f76312f73657474696e677320485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"c12b4ccd5320bbb380ca1a9df90f771d","session":"96e63607-22af-41fe-a10a-50d98295ec47","seq":58,"duration_ms":18943,"bytes_in":8911,"bytes_out":4640},{"timestamp":"2026-09-02T07:48:13","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-json/post-smtp/v1/settings","summary":"","payload_hex":"474554202f77702d6a736f6e2f706f73742d736d74702f76312f73657474696e677320485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"c12b4ccd5320bbb380ca1a9df90f771d","session":"96e63607-22af-41fe-a10a-50d98295ec47","seq":57,"duration_ms":18803,"bytes_in":8740,"bytes_out":4560},{"timestamp":"2026-09-02T07:48:13","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings","summary":"","payload_hex":"474554202f77702d6a736f6e2f67726176697479736d74702f76312f74657374732f6d6f636b2d646174613f706167653d67726176697479736d74702d73657474696e677320485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"c12b4ccd5320bbb380ca1a9df90f771d","session":"96e63607-22af-41fe-a10a-50d98295ec47","seq":56,"duration_ms":18664,"bytes_in":8572,"bytes_out":4480},{"timestamp":"2026-09-02T07:48:13","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.ssh/id_rsa","summary":"","payload_hex":"474554202f2e7373682f69645f72736120485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"c12b4ccd5320bbb380ca1a9df90f771d","session":"96e63607-22af-41fe-a10a-50d98295ec47","seq":55,"duration_ms":18525,"bytes_in":8369,"bytes_out":4400},{"timestamp":"2026-09-02T07:48:13","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.aws/credentials","summary":"","payload_hex":"474554202f2e6177732f63726564656e7469616c7320485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"c12b4ccd5320bbb380ca1a9df90f771d","session":"96e63607-22af-41fe-a10a-50d98295ec47","seq":54,"duration_ms":18370,"bytes_in":8219,"bytes_out":4320},{"timestamp":"2026-09-02T07:48:13","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/Dockerfile","summary":"","payload_hex":"474554202f446f636b657266696c6520485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"c12b4ccd5320bbb380ca1a9df90f771d","session":"96e63607-22af-41fe-a10a-50d98295ec47","seq":53,"duration_ms":18231,"bytes_in":8064,"bytes_out":4240},{"timestamp":"2026-09-02T07:48:12","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/docker-compose.yml","summary":"","payload_hex":"474554202f646f636b65722d636f6d706f73652e796d6c20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"c12b4ccd5320bbb380ca1a9df90f771d","session":"96e63607-22af-41fe-a10a-50d98295ec47","seq":52,"duration_ms":18092,"bytes_in":7915,"bytes_out":4160},{"timestamp":"2026-09-02T07:48:12","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.dockerenv","summary":"","payload_hex":"474554202f2e646f636b6572656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"c12b4ccd5320bbb380ca1a9df90f771d","session":"96e63607-22af-41fe-a10a-50d98295ec47","seq":51,"duration_ms":17953,"bytes_in":7758,"bytes_out":4080}],"http_methods":[{"method":"GET","count":3305},{"method":"POST","count":83},{"method":"HEAD","count":2},{"method":"DELETE","count":1}],"distinct_ports_total":2,"top_paths":[{"path":"/","count":145,"ports":1},{"path":"/.env","count":36,"ports":1},{"path":"/.env.production","count":27,"ports":1},{"path":"/.env.local","count":25,"ports":1},{"path":"/actuator/env","count":24,"ports":1},{"path":"/wp-config.php.bak","count":23,"ports":1},{"path":"/application.yml","count":21,"ports":1},{"path":"/env","count":19,"ports":1},{"path":"/config.json","count":17,"ports":1},{"path":"/actuator/configprops","count":17,"ports":1},{"path":"/appsettings.json","count":16,"ports":1},{"path":"/etc/passwd","count":16,"ports":1},{"path":"/config/application.yml","count":16,"ports":1},{"path":"/settings.py","count":15,"ports":1},{"path":"/.env.staging","count":15,"ports":1}],"distinct_paths_total":200,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"http/1.1","count":337}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2019-3396","tag_type":"cve","title":"Atlassian Confluence Server - Path Traversal","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/rest/tinymce/1/macro/preview","reference_urls":["https://github.com/x-f1v3/CVE-2019-3396","https://nvd.nist.gov/vuln/detail/CVE-2019-3396","https://jira.atlassian.com/browse/CONFSERVER-57974","http://packetstormsecurity.com/files/152568/Atlassian-Confluence-Widget-Connector-Macro-Velocity-Template-Injection.html","https://github.com/ARPSyndicate/cvemon"]},{"tag_id":"CVE-2022-22963","tag_type":"cve","title":"Spring Cloud - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/functionRouter","reference_urls":["https://github.com/spring-cloud/spring-cloud-function/commit/0e89ee27b2e76138c16bcba6f4bca906c4f3744f","https://github.com/cckuailong/spring-cloud-function-SpEL-RCE","https://tanzu.vmware.com/security/cve-2022-22963","https://nsfocusglobal.com/spring-cloud-function-spel-expression-injection-vulnerability-alert/","https://github.com/vulhub/vulhub/tree/scf-spel/spring/spring-cloud-function-spel-injection"]},{"tag_id":"CVE-2023-6875","tag_type":"cve","title":"WordPress POST SMTP Mailer <= 2.8.7 - Authorization Bypass","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-json/post-smtp/v1/get-log","reference_urls":["https://plugins.trac.wordpress.org/browser/post-smtp/trunk/Postman/Mobile/includes/rest-api/v1/rest-api.php#L60","https://plugins.trac.wordpress.org/changeset/3016051/post-smtp/trunk?contextall=1&old=3012318&old_path=%2Fpost-smtp%2Ftrunk","https://www.wordfence.com/threat-intel/vulnerabilities/id/e675d64c-cbb8-4f24-9b6f-2597a97b49af?source=cve","https://nvd.nist.gov/vuln/detail/CVE-2023-6875","https://github.com/UlyssesSaicha/CVE-2023-6875"]},{"tag_id":"CVE-2024-37014","tag_type":"cve","title":"Langflow <= 1.0.12 - Remote Code Execution","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/v1/custom_component","reference_urls":["https://github.com/langflow-ai/langflow/security/advisories/GHSA-9rjh-g5jh-r4mr","https://nvd.nist.gov/vuln/detail/CVE-2024-37014"]},{"tag_id":"CVE-2020-35234","tag_type":"cve","title":"SMTP WP Plugin Directory Listing","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-content/plugins/easy-wp-smtp","reference_urls":["https://nvd.nist.gov/vuln/detail/CVE-2020-35234","https://blog.nintechnet.com/wordpress-easy-wp-smtp-plugin-fixed-zero-day-vulnerability/","https://wordpress.org/plugins/easy-wp-smtp/#developers","https://github.com/ARPSyndicate/cvemon","https://github.com/ARPSyndicate/kenzer-templates"]},{"tag_id":"CVE-2022-1711","tag_type":"cve","title":"draw.io < 18.0.5 - Server Side Request Forgery (SSRF)","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/proxy?url=http:","reference_urls":["https://huntr.dev/bounties/c32afff5-6ad5-4d4d-beea-f55ab4925797","https://github.com/jgraph/drawio/commit/cf5c78aa0f3127fb10053db55b39f3017a0654ae","https://nvd.nist.gov/vuln/detail/CVE-2022-1711"]},{"tag_id":"CVE-2024-44000","tag_type":"cve","title":"LiteSpeed Cache <= 6.4.1 - Sensitive Information Exposure","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-content/debug.log","reference_urls":["https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/litespeed-cache/litespeed-cache-641-unauthenticated-sensitive-information-exposure-via-log-files","https://github.com/absholi7ly/CVE-2024-44000-LiteSpeed-Cache","https://github.com/gbrsh/CVE-2024-44000","https://thehackernews.com/2024/09/critical-security-flaw-found-in.html","https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_litespeed_cookie_theft.rb"]},{"tag_id":"CVE-2026-4020","tag_type":"cve","title":"Gravity SMTP WordPress Plugin - Sensitive Information Exposure","severity":"HIGH","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings","reference_urls":[]}],"data_as_of":"2026-09-11T00:45:01.143742+00:00"}