Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys
2026-06-22T01:24:09Z•e615d0c720184dd42631521684daf72b616b25fa39302caf22a397c637e479b6
ai-agentapi-keysappleautojackcisacvedefenderf5fortibleedfortinetgentlekillergravity-smtpinformation-disclosurejcejoomlanginxnpm-compromise","mastraprivilege-escalationraasransomwareremote-code-executionsecureromsupply-chainusbliter8wordpress
What happened
A batch of high-impact security stories: attackers are actively exploiting a medium-severity Gravity SMTP WordPress flaw (CVE-2026-4020) to steal API keys from ~100K sites, while CISA and researchers warn of multiple high‑risk issues including an actively exploited Joomla JCE RCE (CVE-2026-48907, KEV entry) and two critical NGINX Open Source flaws (one published as CVE-2026-42530). Microsoft disclosed a Defender elevation-of-privilege zero-day (CVE-2026-50656) with a patch in development. Separately, Paradigm Shift published an unpatchable SecureROM exploit (usbliter8) affecting Apple A12/A13,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- e615d0c720184dd42631521684daf72b616b25fa39302caf22a397c637e479b6
- Enrichment time
- 2026-06-22T01:24:09Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.