CVE-2026-4020 – CyberSecurityBoard

Critical CVEs

Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys

Threat actors are actively exploiting a recently patched medium-severity information disclosure vulnerability in the Gravity SMTP WordPress plugin, which is installed on…

API keys CVE-2026-11645 CVE-2026-4020 email security

June 25, 2026

Critical CVEs

⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More

⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More Ravie LakshmananJun 22, 2026Cybersecurity / Hacking It’s…

CVE-2025-15445 CVE-2025-59718 CVE-2025-59719 CVE-2026-20253

June 25, 2026

Critical CVEs

CVE-2026-4020: Gravity SMTP WordPress Plugin Information Disclosure Vulnerability

CVE-2026-4020 is a medium-severity information disclosure vulnerability in the Gravity SMTP WordPress plugin, affecting versions prior to 2.1.5. The flaw allows unauthenticated…

API keys CVE-2026-4020 Gravity SMTP information disclosure

June 25, 2026