Skip to content
The Nexus
DossierENTITY

information disclosure flaw

Coverage of information disclosure flaw in the Nexus archive.

Earliest in view: Jun 20 · 09:56 UTCMost recent: Jun 20 · 09:56 UTC
Co-mentioned in this coverage
Gravity SMTPorganization1WordPressorganization1API keystopic1CVE-2026-4020topic1
Recent coverage
  • SECURITYJun 20 · 09:56 UTCTHE HACKER NEWS
    Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys

    Hackers are exploiting a patched security flaw in the Gravity SMTP WordPress plugin, affecting approximately 100,000 sites. The vulnerability, CVE-2026-4020, is a medium-severity information disclosure flaw allowing unauthenticated attackers to extract sensitive data like API keys and OAuth tokens.