Tag: API keys

Critical CVEs

Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys

Threat actors are actively exploiting a recently patched medium-severity information disclosure vulnerability in the Gravity SMTP WordPress plugin, which is installed on…

API keys CVE-2026-11645 CVE-2026-4020 email security

June 25, 2026

Critical CVEs

CVE-2026-4020: Gravity SMTP WordPress Plugin Information Disclosure Vulnerability

CVE-2026-4020 is a medium-severity information disclosure vulnerability in the Gravity SMTP WordPress plugin, affecting versions prior to 2.1.5. The flaw allows unauthenticated…

API keys CVE-2026-4020 Gravity SMTP information disclosure

June 25, 2026