WordPress people, if you use Gravity SMTP you need to update the plugin on all your sites and churn your email API keys immediately. This is being actively exploited: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/gravitysmtp/gravity-smtp-214-unauthenticated-sensitive-information-exposure-via-rest-api