Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys
Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that’s installed on about 100,000 sites.
The vulnerability, tracked as CVE-2026-4020 (CVSS score: 5.3), is a medium-severity information disclosure flaw that can allow unauthenticated attackers to extract sensitive data, such as configuration data, API keys, secrets, and OAuth tokens
Source: The Hacker News
Watchtower Mittags-Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. a password is required — sudo: requests (recent log) Mehr Live-Daten und die komplette Historie im /attacks/ Watchtower-Bereich
Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 729 requests (recent log) 216.73.216.75 — 391 requests (recent log) 66.187.7.97 — 276 requests (recent
New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens New research shows content inside an email can escape its message boundary and interfere with the webmail interface.