Tag: mass-exploiting

• ForensicsS
• 0 Comments

Hackers are mass-exploiting a Gravity SMTP flaw to take API keys from 100,000 WordPress sites

OSINT TL;DR Wordfence blocked 17M+ makes an try to use a Gravity SMTP bug that leaks API keys and arrangement files from WordPress sites without authentication. Attackers are actively exploiting a vulnerability within the Gravity SMTP WordPress plugin that exposes API keys, OAuth tokens, and detailed arrangement configuration files to any individual that sends a […]