vulnerability
Hackers exploit info disclosure bug in Gravity SMTP WordPress plugin
Medium
Summary
Hackers are actively exploiting a vulnerability in the Gravity SMTP WordPress plugin, allowing them to access sensitive information such as API keys and email service credentials. This flaw, tracked as CVE-2026-4020, has impacted over 100,000 websites and resulted in a surge of malicious requests. Security firms are urging website administrators to update the plugin immediately to mitigate the risk of credential theft and further attacks.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data