sign in--:--:--UTC

CVE-2026-4020

exploited in the wild☆ pin

CVSS

5.3

Reports

2

First seen

Jun 19, 2026

Last seen

Jun 20, 2026

Affected product

Gravity SMTP WordPress Plugin

Recent reports

Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys

The Hacker NewsJun 20, 2026 High

Hackers exploit information disclosure bug in Gravity SMTP WordPress plugin

Bleeping ComputerJun 19, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans