Gravity SMTP is a WordPress plugin used for configuring SMTP email settings and integrating with third-party email services. It is installed on approximately 100,000 sites and was affected by CVE-2026-4020, an information disclosure vulnerability that exposed API keys and other sensitive data.