Skip to main content

Hackers are mass-exploiting a Gravity SMTP flaw to steal API keys from 100,000 WordPress sites


Attackers are actively exploiting a vulnerability in the Gravity SMTP WordPress plugin that exposes API keys, OAuth tokens, and detailed system configuration data to anyone who sends a single unauthenticated HTTP request. Wordfence, the WordPress security firm owned by Defiant, says it has blocked more than 17 million exploit attempts targeting the flaw since activity […]



This story continues at The Next Web https://ift.tt/jbYD5z7
Read full article: The Next Web
Labels:

Comments

Post a Comment

What's new?

Popular posts from this blog

Lucid Motors replaces its CFO and overhauls its entire leadership team as new CEO reshapes the company

Lucid Motors said on Thursday that its chief financial officer, Taoufiq Boussaid, will be leaving the company, the latest in a series of leadership changes under new CEO Silvio Napoli. Alexander De Bock, a veteran automotive finance executive who previously served as CFO of TI Automotive, will replace Boussaid after a transition period that will […] This story continues at The Next Web https://ift.tt/ivLHVb6 Read full article: The Next Web
Post a Comment
Read more