The Next Web
Hackers are mass-exploiting a Gravity SMTP flaw to steal API keys from 100,000 WordPress sites
Attackers are actively exploiting a vulnerability in the Gravity SMTP WordPress plugin that exposes API keys, OAuth tokens, and detailed system configuration data to anyone who sends a single unauthenticated HTTP request. Wordfence, the…
View original source — The Next Web ↗
Related stories
The Next Web
TechnologyJun 9, 2026 · 1 min
Two Russian APT groups are exploiting a WinRAR flaw patched nearly a year ago to hit Ukraine
The Next Web
The Next Web
ScienceJun 18, 2026 · 1 min
Attackers cracked 75,000 Fortinet firewalls with old passwords, not a zero-day
The Next Web
TechRadar
TechnologyJun 16, 2026 · 1 min
Over 1 million WordPress sites at risk after popular plugin hacked
TechRadar
TechCrunch
TechnologyJun 17, 2026 · 1 min
Cybercriminals allegedly hacked tens of thousands of Fortinet firewalls used by major companies all over the world
TechCrunch