WPVibe WordPress plugin makes it easy and safe to connect virtually any AI to a WordPress site and safely edit virtually ...

WordPress plugins OptinMonster, TrustPulse, and PushEngage have been compromised in a supply-chain attack impacting Awesome Motive's content distribution network (CDN). Of the three products, the ...

A security flaw in the Gravity SMTP WordPress plugin has drawn more than 17 million automated exploit attempts since early May 2026 — and every site that ran an unpatched version while those attacks ...

Threat actors are exploiting an unauthenticated information disclosure vulnerability in the WordPress plugin Gravity SMTP, active on 100,000 sites. The flaw is tracked as CVE-2026-4020 and received a ...

Currently, attackers are targeting WordPress websites with the Gravity-SMTP plugin and attacking instances. A security patch has been available since the end of this year, but has obviously not yet ...

WILMINGTON, DE - July 01, 2026 - PRESSADVANTAGE - G-Stacker has made available a digital infrastructure platform ...

Three popular plugins served malicious JavaScript through a compromised CDN.

Starting on June 11, 2026, the Arch User Repository (AUR) was targeted by malware which rapidly compromised over 1,500 packages. The AUR repository allows for abandoned community packages to be taken ...

Threat actors are exploiting a medium-severity vulnerability in the Gravity SMTP WordPress plugin to steal complete system details, Defiant warns. Gravity SMTP for WordPress is an email deliverability ...

Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that's installed on about 100,000 sites. The vulnerability, tracked as CVE-2026-4020 (CVSS ...