Information disclosure flaw in WordPress Gravity SMTP plugin actively exploited
Attackers are actively exploiting an unauthenticated information disclosure vulnerability in the WordPress Gravity SMTP plugin, which is active on 100,000 sites. The vulnerability was fixed in version 2.1.5.
CERT24