Attackers Exploit Gravity SMTP Plugin Flaw to Harvest Valuable WordPress Data

SecurityWeek

June 22, 2026 at 11:45 AM

Actively Exploited

Overview

A vulnerability in certain versions of the Gravity SMTP plugin for WordPress has been exploited by attackers to extract sensitive information. This flaw allows the leakage of API keys, tokens, server details, and other confidential data. Websites using outdated or unpatched versions of the plugin are particularly at risk. This incident is concerning because it can lead to unauthorized access and further exploitation of affected sites. Users and website administrators are urged to update their plugins to protect against these data leaks and ensure the security of their WordPress installations.

Key Takeaways

Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
Affected Systems: Gravity SMTP plugin for WordPress (specific versions not specified)
Action Required: Update to the latest version of the Gravity SMTP plugin or apply available patches.
Timeline: Newly disclosed

Original Article Summary

Vulnerable WordPress plugin iterations leak API keys, secrets, tokens, server information, and other data. The post Attackers Exploit Gravity SMTP Plugin Flaw to Harvest Valuable WordPress Data appeared first on SecurityWeek.

Impact

Gravity SMTP plugin for WordPress (specific versions not specified)

Exploitation Status

This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.

Timeline

Newly disclosed

Remediation

Update to the latest version of the Gravity SMTP plugin or apply available patches.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Exploit, Vulnerability, Update.

Read Original Article

Related Coverage

A Glimpse into the “Search Your Target” Market for Stolen Credentials

BleepingComputer

A new underground market has emerged where attackers can easily search through stolen credential databases to find specific accounts or companies without having to sift through vast amounts of data themselves. This service allows cybercriminals to efficiently target their attacks on particular organizations or individuals by paying others to conduct the searches for them. The growing trend raises concerns for businesses, as it makes it easier for attackers to exploit compromised credentials. As these services become more accessible, companies need to enhance their security measures to protect against targeted attacks. This shift in tactics emphasizes the ongoing threat posed by credential theft and the importance of proactive security strategies.

Jun 22, 2026

Microsoft Attributes Mastra AI Supply Chain Attack to North Korea

Infosecurity Magazine

Microsoft security researchers have identified a supply chain attack linked to the North Korean group known as Sapphire Sleet, targeting the company Mastra. This attack highlights the ongoing threat posed by state-sponsored actors, particularly in the realm of supply chain vulnerabilities, which can impact multiple organizations through a single breach. The specifics of how the attack was carried out and the exact implications for Mastra and its customers have not been detailed yet. However, supply chain attacks can lead to significant data breaches and operational disruptions, making this incident concerning for businesses that rely on Mastra's services. Companies in the tech sector should remain vigilant against potential threats from state-sponsored groups like Sapphire Sleet, as the risk of similar attacks continues to grow.

Jun 22, 2026

What the Latest ShinyHunters Breaches Reveal About Modern Cyberattacks

SecurityWeek

The ShinyHunters group has been at the forefront of several high-profile data breaches, demonstrating that attackers can achieve significant damage without relying on malware or zero-day exploits. Instead, they often utilize stolen credentials and other readily available information to access sensitive data. This method has led to the exposure of user information from various services, impacting numerous companies and their customers. The implications of these breaches are severe, as they compromise personal data and can lead to identity theft, financial loss, and a loss of trust in the affected services. Organizations need to strengthen their security measures, including enforcing stronger password policies and implementing multi-factor authentication to mitigate such risks.

Jun 22, 2026

New Exploit Bypasses Apple’s Boot Defenses, Affects Millions of iPhones

SecurityWeek

A new exploit called Usbliter8 has been discovered that bypasses Apple’s boot defenses, affecting millions of iPhones. This vulnerability cannot be patched, and researchers have released a proof-of-concept exploit, raising concerns about the potential for misuse. Users of affected iPhone models should be particularly vigilant, as this exploit could allow attackers to gain unauthorized access to devices. The widespread nature of this issue makes it critical for Apple to address, as it could lead to increased risks for personal data and security. As of now, there are no known patches or updates to mitigate this vulnerability, leaving many devices exposed.

Jun 22, 2026

Fortinet Responds to FortiBleed Campaign

SecurityWeek

Fortinet has acknowledged a serious credential-harvesting campaign known as FortiBleed, which has resulted in the collection of over 86,000 confirmed working credentials. This campaign poses a significant risk to users and organizations that utilize Fortinet's products, as attackers can exploit these credentials for unauthorized access to sensitive systems. The incident is particularly alarming because it affects a wide range of users, potentially including businesses that rely on Fortinet's security solutions. Companies should take immediate steps to secure their systems and monitor for any suspicious activities, as the implications of this data breach could lead to further attacks or data leaks. This situation underscores the ongoing challenges in cybersecurity and the need for constant vigilance.

Jun 22, 2026

UK Information Commissioner Resigns After Workplace Investigation

Infosecurity Magazine

The Information Commissioner of the UK has resigned after an internal investigation deemed his position 'untenable.' While specific details about the investigation have not been disclosed, the resignation raises concerns about the leadership stability at the UK's data protection authority. This agency plays a crucial role in overseeing data privacy laws and regulations, making the situation particularly significant for individuals and organizations relying on robust data protection. The departure of the commissioner could impact ongoing regulatory efforts and the enforcement of data protection standards in the UK, especially in the wake of increasing scrutiny over data privacy issues. Stakeholders will be watching closely to see who will fill this important role and how it may affect the future of data protection in the country.

Jun 22, 2026