If you use Easy WP SMTP plugin, you should update it or deactivate it now. According to a recent announcement from Naked Security, multiple hacker groups have located and begun to exploit a vulnerability.
If you are interested in the details, you can read the full post here.
But first, update or deactivate now!