VulnCheck KEV: CVE-2026-4020

The Gravity SMTP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4. This is due to a REST API endpoint registered at /wp-json/gravitysmtp/v1/tests/mock-data with a permissioncallback that unconditionally returns true, allowing any...

PT-2026-29181

Name of the Vulnerable Software and Affected Versions Gravity SMTP versions prior to 2.1.5 Description The Gravity SMTP plugin for WordPress has a flaw that allows unauthorized access to sensitive information. A REST API endpoint located at '/wp-json/gravitysmtp/v1/tests/mock-data' does not requi...