Hackers are mass-exploiting a Gravity SMTP flaw to steal API keys from 100,000 WordPress sites

Attackers are actively exploiting a vulnerability in the Gravity SMTP WordPress plugin that exposes API keys, OAuth tokens, and detailed system configuration data to anyone who sends a single unauthenticated HTTP request. Wordfence, the WordPress security firm owned by Defiant, says it has blocked more than 17 million exploit attempts targeting the flaw since activity […] This story continues at The Next Web

This story was reported by The Next Web. EUROPES curates Europe's most relevant coverage — read the full report at the original source.

Read full coverage at The Next Web →

Hackers are mass-exploiting a Gravity SMTP flaw to steal API keys from 100,000 WordPress sites

More from Tech & Startups

AI security guardrails hinder vulnerability research and drive shift to foreign models

Stripe backs TechCrunch startup competition to scout Australian tech talent

Mobileye CEO Amnon Shashua to step down amid push into robotaxis and robotics

Lawmakers push for AI 'kill switch' after OpenAI goes rogue

Ford drops Google for Apple Maps in next-generation electric vehicles

Musk says Optimus will be the hardest product Tesla has ever scaled