The Patch-Gap Problem: Why Gravity SMTP Sites Got Hit 3 Months After the Fix
CVE-2026-4020 was patched in March 2026 but mass-exploited in June. The story is the 82-day patch gap - why WordPress sites get compromised by fixes nobody installed, and the operational discipline that closes it.