CVE-2019-11633: HoneyPress through 2016-09-27 can be fingerprinted by attackers because of the ingrained unique www.atxsec.com and ayylmao.wpengine.com hostnames within the fake WordPress templates. This allows attac

high Affects honeypress (WordPress plugin). Feed 2026.10.29.1, updated 2026-10-28; published 2019-05-01; advisory modified 2026-06-17.

HoneyPress through 2016-09-27 can be fingerprinted by attackers because of the ingrained unique www.atxsec.com and ayylmao.wpengine.com hostnames within the fake WordPress templates. This allows attac

Package: honeypress (WordPress plugin) WordPress
Affected versions: <=2016-09-27
Fixed in: no fix recorded
Severity: high CVSS 7.5
Exploitation: not on CISA KEV · EPSS 1% (72.7th percentile)
Published: 2019-05-01
Source: nvd

References

CWE-200

NVD record honeypress (WordPress plugin) advisories

Am I affected?

Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.

# one-time install
pip install phpwarden

# then
phpwarden wordpress /var/www/html

Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.

Install docs How findings are ranked

Related advisories

CVE-2017-5487 medium wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implemen same weakness: CWE-200
CVE-2018-7251 critical Anchor CMS Logs Credentials same weakness: CWE-200
CVE-2021-39327 medium The BulletProof Security WordPress plugin is vulnerable to sensitive information disclosur same weakness: CWE-200
CVE-2009-0815 medium TYPO3 leaks a hash secret in an error message same weakness: CWE-200
CVE-2014-2383 medium DOMPDF Arbitrary File Read same weakness: CWE-200
CVE-2019-17671 medium In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because same weakness: CWE-200