The recent exploitation of a Gravity SMTP vulnerability highlights systemic failures in WordPress security that risk sensitive data disclosure.