Defiant warns that attackers are exploiting CVE-2026-4020 in the Gravity SMTP WordPress plugin to access full system reports from vulnerable sites. The exposed data can include server details, WordPress configuration, and sensitive API keys and tokens, so admins should update to Gravity SMTP 2.1.5 and rotate any exposed credentials. #GravitySMTP #CVE-2026-4020...

Hackers are exploiting a vulnerability in the Gravity SMTP WordPress plugin to extract configuration data, including API keys and tokens.

page=gravitysmtp-settings query parameter read more about Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys

Daily Recap, Police and international partners disrupted a malware network tied to Russia’s Evil Corp, while Operation Endgame took down SocGholish servers and cleaned 14,971 compromised WordPress sites. Security teams also warned that The Gentlemen ransomware uses the GentleKiller EDR-killer framework to target 400 security processes before encryption. #EvilCorp #OperationEndgame #SocGholish #WordPress #TheGentlemen #GentleKiller #Texas #FortiBleed #Fortinet #Klue #Icarus #GravitySMTP #usbliter8 #SecureROM #AppleA12 #AppleA13 #AutoJack #Beats #Continuum

Angreifer verschaffen sich auf Wordpress-Websites mit Gravity-SMTP-Plug-in Zugriff auf eigentlich geschützte Daten.

Daily Recap, Five Eyes warns that advanced AI hacking models could reach the cyber scene within months, while INTERPOL reports rising phishing and AI-powered scams across Asia-Pacific. In addition, North Korean activity is linked to the Mastra NPM supply-chain attack, attackers are targeting the Gravity SMTP WordPress plugin, and the AryStinger botnet continues infecting D-Link routers. #FiveEyes #INTERPOL #Mastra #NPM #NorthKorean #GravitySMTP #WordPress #AryStinger #DBlink #DLink #TexasParksAndWildlife #Ukraine #EU

Threat actors are actively exploiting CVE-2026-4020 in Gravity SMTP, a WordPress plugin used on about 100,000 sites, to steal sensitive configuration data, API keys, secrets, and OAuth tokens. Wordfence has blocked over 17 million attempts, and site owners should update to version 2.1.5 and rotate exposed credentials immediately. #GravitySMTP #CVE-2026-4020 #Wordfence...

Threat actors are actively exploiting CVE-2026-4020 in the Gravity SMTP WordPress plugin, which affects more than 100,000 sites and can expose sensitive API keys, OAuth tokens, and email service credentials. Wordfence has already blocked over 17 million attempts, while a separate critical flaw, CVE-2026-8713 in Avada Builder, can let attackers delete arbitrary files and potentially take over sites. #GravitySMTP #CVE20264020 #Wordfence #AvadaBuilder #CVE20268713

Wordfence Intelligence publicó su reporte semanal con casos críticos como CVE-2026-40776 en Eventin y el ataque de supply chain que comprometió 30+ plugins durante ocho meses.

Un fallo de autorización en Gravity SMTP expone claves de API y credenciales SMTP sin autenticación. Así funciona el exploit y cómo proteger tu sitio.

CVE-2026-4020 expone credenciales SMTP de tu WordPress sin autenticación. Actualizá a 2.1.5 y rotá claves de inmediato.

The Gravity SMTP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4. This is due to a REST API endpoint registered at /wp-json/gravitysmtp/v1/tests/mock-data with a permission_callback that unconditionally returns true, allowing any unauthenticated visitor to access it. When the ?page=gravitysmtp-settings query parameter …

Angreifer verschaffen sich auf Wordpress-Websites mit Gravity-SMTP-Plug-in Zugriff auf eigentlich geschützte Daten.

CVE-2026-4162 vulnerability in gravitysmtp WordPress plugin. Proof of concept, ModSecurity rule, and patched version analysis by Atomic Edge.