Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack after unknown threat actors managed to tamper with the official release channels and push backdoor code.

Attackers are exploiting CVE-2026-4020 in Gravity SMTP to leak API keys, OAuth tokens, and system data from WordPress sites.

Thank you for considering Purdue University for your graduate studies! We’ve designed a seamless application process to help you get started with confidence. With just one application and a single fee ...