{"ip":"34.147.157.205","total_events":11,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"5 exploit-path probe(s)","confidence":"medium","network_type":null,"why":["5 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."]},"first_seen":"2026-06-30T01:37:36","last_seen":"2026-06-30T06:44:27","events_24h":0,"events_7d":0,"geo":{"country_code":"GB","country_name":"United Kingdom","region":"England","city":"City of London","lat":51.5164,"lon":-0.093,"asn":396982,"org":"Google LLC"},"source_domain":"205.157.147.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[{"cve_id":"CVE-2026-4020","title":"Gravity SMTP WordPress Plugin - Sensitive Information Exposure","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-json/gravitysmtp/v1/tests/mock-data"},{"cve_id":"CVE-2021-37598","title":"WP Cerber < 8.9.3 - Broken Access Control","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-json"}],"malware":[],"top_ports":[{"port":27017,"proto":"tcp","label":"MongoDB","count":6},{"port":8070,"proto":"tcp","label":"","count":5}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9"],"tls_ja3":["19e29534fd49dd27d09234e639c4057e"],"ja4h":["ge11nn0500_9af7e0472034"]},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":6944,"ge11nn0500_9af7e0472034":5660},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.2 Safari/605.1.15","Mozilla/5.0 (iPad; CPU OS 12_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.1 Mobile/15E148 Safari/604.1","SAMSUNG-SGH-A867/A867UCHJ3 SHP/VPP/R5 NetFront/35 SMM-MMS/1.2.0 profile/MIDP-2.0 configuration/CLDC-1.1 UP.Link/6.3.0.0.0","Mozilla/5.0 (Linux; Android 9; SM-G955N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","Mozilla/5.0 (Linux; Android 9; Redmi Note 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36","Mozilla/5.0 (Linux; Android 9; SAMSUNG SM-G965F Build/PPR1.180610.011) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/9.4 Chrome/67.0.3396.87 Mobile Safari/537.36","Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.62 Safari/537.36"],"timeline":[{"date":"2026-06-30","count":11}],"recent_events":[{"timestamp":"2026-06-30T06:44:27","port":27017,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:27017\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-json/gravitysmtp/v1/settings","summary":"","payload_hex":"474554202f77702d6a736f6e2f67726176697479736d74702f76312f73657474696e677320485454502f312e310d0a486f73743a20<HONEYPOT>3a32373031370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31345f3029204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f36392e302e333439372e313030205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36","community_id":"1:EpmzAc27A/XVs9fL8cwsBtDOeak=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"af8665b7-f68f-4a77-a30e-e7a8efd75ab2","seq":1,"duration_ms":0,"bytes_in":276,"bytes_out":79},{"timestamp":"2026-06-30T06:44:12","port":27017,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:27017\",\"user-agent\":\"Mozilla/5.0 (Linux; Android 9; SAMSUNG SM-G965F Build/PPR1.180610.011) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/9.4 Chrome/67.0.3396.87 Mobile Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/wp-json/gravitysmtp/v1/settings","summary":"","payload_hex":"474554202f77702d6a736f6e2f67726176697479736d74702f76312f73657474696e677320485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Linux; Android 9; SAMSUNG SM-G965F Build/PPR1.180610.011) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/9.4 Chrome/67.0.3396.87 Mobile Safari/537.36","community_id":"1:5Scwox6dnYGbl8XdBURHS63b4IA=","ja3":"","session":"f67f1852-ac31-4f22-ab48-2a9e05387ce5","seq":1,"duration_ms":100,"bytes_in":324,"bytes_out":79},{"timestamp":"2026-06-30T06:44:02","port":27017,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:27017\",\"user-agent\":\"Mozilla/5.0 (iPad; CPU OS 12_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.1 Mobile/15E148 Safari/604.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-json/wp/v2/settings","summary":"","payload_hex":"474554202f77702d6a736f6e2f77702f76322f73657474696e677320485454502f312e310d0a486f73743a20<HONEYPOT>3a32373031370d0a557365722d4167656e743a204d6f7a696c6c612f352e302028695061643b20435055204f532031325f335f31206c696b65204d6163204f53205829204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31322e312e31204d6f62696c652f313545313438205361666172692f3630342e310d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (iPad; CPU OS 12_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.1 Mobile/15E148 Safari/604.1","community_id":"1:vvWZOrHA98AwMUw0FhDn3Q6cR9Q=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"2e754e7f-c9ad-4b53-8c7a-220b6160a9d1","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":79},{"timestamp":"2026-06-30T06:44:02","port":27017,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:27017\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.62 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-json/gravitysmtp/v1/tests/mock-data","summary":"","payload_hex":"474554202f77702d6a736f6e2f67726176697479736d74702f76312f74657374732f6d6f636b2d6461746120485454502f312e310d0a486f73743a20<HONEYPOT>3a32373031370d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b20574f57363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f36322e302e333230322e3632205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.62 Safari/537.36","community_id":"1:G4wY/EsOdex2+NP1Qchrvv2KlNE=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"c11df9b3-5113-468b-b0e7-21f582b229a6","seq":1,"duration_ms":100,"bytes_in":271,"bytes_out":79},{"timestamp":"2026-06-30T06:44:02","port":27017,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:27017\",\"user-agent\":\"Mozilla/5.0 (Linux; Android 9; Redmi Note 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-json/gravitysmtp/v1/config","summary":"","payload_hex":"474554202f77702d6a736f6e2f67726176697479736d74702f76312f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a32373031370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284c696e75783b20416e64726f696420393b205265646d69204e6f7465203729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37362e302e333830392e3839204d6f62696c65205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Linux; Android 9; Redmi Note 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36","community_id":"1:HpdShZQ+prMyYYzuqyM0Sj3eOdQ=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"2c3e44a9-83fe-4889-abc0-8504309277df","seq":1,"duration_ms":100,"bytes_in":277,"bytes_out":79},{"timestamp":"2026-06-30T06:44:02","port":27017,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:27017\",\"user-agent\":\"Mozilla/5.0 (Linux; Android 9; SM-G955N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings","summary":"","payload_hex":"474554202f77702d6a736f6e2f67726176697479736d74702f76312f74657374732f6d6f636b2d646174613f706167653d67726176697479736d74702d73657474696e677320485454502f312e310d0a486f73743a20<HONEYPOT>3a32373031370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284c696e75783b20416e64726f696420393b20534d2d473935354e29204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37362e302e333830392e313131204d6f62696c65205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Linux; Android 9; SM-G955N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","community_id":"1:3RJDP+riB7IuOz9e+JrORCo16z0=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"d809ac43-ebe9-4a71-8443-de52f0c4714a","seq":1,"duration_ms":100,"bytes_in":309,"bytes_out":79},{"timestamp":"2026-06-30T01:37:36","port":8070,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8070\",\"user-agent\":\"Mozilla/5.0 (Linux; Android 9; LG-H930) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-json/wp/v2/settings","summary":"","payload_hex":"474554202f77702d6a736f6e2f77702f76322f73657474696e677320485454502f312e310d0a486f73743a20<HONEYPOT>3a383037300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284c696e75783b20416e64726f696420393b204c472d4839333029204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37362e302e333830392e313131204d6f62696c65205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Linux; Android 9; LG-H930) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","community_id":"1:sKjX4w+SnXNtlzYfxpC9KLjt/9E=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"9c24ebe8-d32b-443c-a7d8-bc6b34c33718","seq":1,"duration_ms":100,"bytes_in":265,"bytes_out":79},{"timestamp":"2026-06-30T01:37:36","port":8070,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8070\",\"user-agent\":\"Mozilla/5.0 (Linux; Android 9; motorola one vision) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-json/gravitysmtp/v1/tests/mock-data","summary":"","payload_hex":"474554202f77702d6a736f6e2f67726176697479736d74702f76312f74657374732f6d6f636b2d6461746120485454502f312e310d0a486f73743a20<HONEYPOT>3a383037300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284c696e75783b20416e64726f696420393b206d6f746f726f6c61206f6e6520766973696f6e29204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37362e302e333830392e313131204d6f62696c65205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Linux; Android 9; motorola one vision) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","community_id":"1:LHS/r7xT5vMIkw2CNSOFvrUQUL4=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"56c59236-b97d-4139-b5d0-1469ecc63645","seq":1,"duration_ms":100,"bytes_in":293,"bytes_out":79},{"timestamp":"2026-06-30T01:37:36","port":8070,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8070\",\"user-agent\":\"SAMSUNG-SGH-A867/A867UCHJ3 SHP/VPP/R5 NetFront/35 SMM-MMS/1.2.0 profile/MIDP-2.0 configuration/CLDC-1.1 UP.Link/6.3.0.0.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-json/gravitysmtp/v1/config","summary":"","payload_hex":"474554202f77702d6a736f6e2f67726176697479736d74702f76312f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a383037300d0a557365722d4167656e743a2053414d53554e472d5347482d413836372f413836375543484a33205348502f5650502f5235204e657446726f6e742f333520534d4d2d4d4d532f312e322e302070726f66696c652f4d4944502d322e3020636f6e66696775726174696f6e2f434c44432d312e312055502e4c696e6b2f362e332e302e302e300d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"SAMSUNG-SGH-A867/A867UCHJ3 SHP/VPP/R5 NetFront/35 SMM-MMS/1.2.0 profile/MIDP-2.0 configuration/CLDC-1.1 UP.Link/6.3.0.0.0","community_id":"1:Snm+ceOpQ5BQDSHG1u+QTG6jCKo=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"4e635f97-a028-4647-967f-467f6a795d14","seq":1,"duration_ms":100,"bytes_in":273,"bytes_out":79},{"timestamp":"2026-06-30T01:37:36","port":8070,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8070\",\"user-agent\":\"Mozilla/5.0 (WindowsCE 6.0; rv:2.0.1) Gecko/20100101 Firefox/4.0.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-json/gravitysmtp/v1/settings","summary":"","payload_hex":"474554202f77702d6a736f6e2f67726176697479736d74702f76312f73657474696e677320485454502f312e310d0a486f73743a20<HONEYPOT>3a383037300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773434520362e303b2072763a322e302e3129204765636b6f2f32303130303130312046697265666f782f342e302e310d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (WindowsCE 6.0; rv:2.0.1) Gecko/20100101 Firefox/4.0.1","community_id":"1:IT/5xozbnPm97t0W+6KGIkRfrhU=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"594e1d43-0dd1-4eb0-bd0f-945232e7a054","seq":1,"duration_ms":100,"bytes_in":220,"bytes_out":79}],"http_methods":[{"method":"GET","count":11}],"distinct_ports_total":2,"top_paths":[{"path":"/wp-json/gravitysmtp/v1/settings","count":3,"ports":2},{"path":"/wp-json/wp/v2/settings","count":2,"ports":2},{"path":"/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings","count":2,"ports":2},{"path":"/wp-json/gravitysmtp/v1/config","count":2,"ports":2},{"path":"/wp-json/gravitysmtp/v1/tests/mock-data","count":2,"ports":2}],"distinct_paths_total":5,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Charset","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Charset","value":"utf-8","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:27017","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2026-4020","tag_type":"cve","title":"Gravity SMTP WordPress Plugin - Sensitive Information Exposure","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-json/gravitysmtp/v1/tests/mock-data","reference_urls":["https://patchstack.com/database/vulnerability/wordpress-gravity-smtp-plugin-2-1-4-unauthenticated-sensitive-information-exposure-via-rest-api-vulnerability","https://www.wordfence.com/threat-intel/vulnerabilities/id/12a296db-ecc0-409b-8718-0c208504053a?source=cve","https://nvd.nist.gov/vuln/detail/CVE-2026-4020"]},{"tag_id":"CVE-2021-37598","tag_type":"cve","title":"WP Cerber < 8.9.3 - Broken Access Control","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-json","reference_urls":["https://github.com/mandiant/Vulnerability-Disclosures/blob/master/FEYE-2021-0024/FEYE-2021-0024.md","https://nvd.nist.gov/vuln/detail/CVE-2021-37598"]}],"data_as_of":"2026-07-09T19:34:14.918978+00:00"}