CVE-2019-11633

7.5 highEPSS 1.4%

HoneyPress through 2016-09-27 can be fingerprinted by attackers because of the ingrained unique www.atxsec.com and ayylmao.wpengine.com hostnames within the fake WordPress templates. This allows attackers to discover and avoid this honeypot system.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2019-05-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

honeypress_project:honeypress

References

https://github.com/dustyfresh/HoneyPress/issues/1
https://github.com/dustyfresh/HoneyPress/issues/1

Check your stack JSON