HomeAI · summaries
Storia in 5 fonti
Hackers are mass-exploiting a Gravity SMTP flaw to steal API keys from 100,000 WordPress sites
Wordfence has blocked 17M+ exploit attempts targeting a Gravity SMTP bug that leaks API keys, OAuth tokens, and full system reports without authentication.
Confronto fonti
5 prospettive sulla stessa storiaTimeline cronologica
- ·
bleepingcomputer.com
Hackers exploit info disclosure bug in Gravity SMTP WordPress plugin
Threat actors are exploiting an unauthenticated information disclosure vulnerability in the WordPress plugin Gravity SMTP, active on 100,000 sites.
- ·
thehackernews.com
Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys
Attackers are exploiting CVE-2026-4020 in Gravity SMTP to leak API keys, OAuth tokens, and system data from WordPress sites.
