"A security vulnerability (CVE-2026-4020) in the Gravity-SMTP plugin allows unauthorized access to system configurations. 17 million attack attempts have been documented. Admins are urged to update to version 2.1.5."