Gravity SMTP

vulnerability

Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys

A vulnerability in the Gravity SMTP WordPress plugin has been exploited by attackers, allowing them to extract sensitive data such as API keys and configuration details from approximately 100,000 sites. The flaw, tracked…

The Hacker News · Jun 20, 2026 Medium

CVE-2026-4020 US wordpress api credentials

vulnerability

Hackers exploit info disclosure bug in Gravity SMTP WordPress plugin

Hackers are actively exploiting a vulnerability in the Gravity SMTP WordPress plugin, allowing them to access sensitive information such as API keys and email service credentials. This flaw, tracked as CVE-2026-4020, has…

BleepingComputer · Jun 19, 2026 Medium

CVE-2026-4020 CVE-2026-8713 wordpress api credentials

All articles

news.mlab.sh

Gravity SMTP

Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys

Hackers exploit info disclosure bug in Gravity SMTP WordPress plugin