Two hacking groups have been spotted targeting websites running unpatched versions of the WordPress plugin Easy WP SMTP. Easy WP for SMTP, which has more than 300,000 installs, is marketed as a plugin that lets WordPress sites route their bulk emails via a reputable SMTP server as a way of ensuring they aren’t spamholed by suspicious email providers.

Read full news article on Naked Security