Hackers exploit info disclosure bug in Gravity SMTP WordPress plugin
Threat actors are exploiting an unauthenticated information disclosure vulnerability in the WordPress plugin Gravity SMTP, active on 100,000 sites.
Grace Ops
CONTENT OPTIMIZATION · AEO/GEO
Not yet scored. Next refresh: 02:00 UTC.
audit trail / provenance2
Provenance
Claims tie surfaced fields back to sources, models, or heuristics.
- severity.upliftheuristicn/aCVE or advisory identifiers detected — floor raised to at least high.
- severity.upliftheuristicn/aActive exploitation / in-the-wild language detected — floor raised to at least high.
What changed
Append-only revisions when ingest or analysts evolve the record.
No revision rows stored yet.
Sources
Brief grounded in 1 source.
discussion
Sign in to join the thread and vote on comments.
Loading comments…