Search/Stolen UpdraftCentral keys used to backdoor WordPress sites
● News

Stolen UpdraftCentral keys used to backdoor WordPress sites

A threat actor breached TeamUpdraft's website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral connection keys that can send commands to connected websites. TeamUpdraft detected unauthorized access to its infrastructure over the weekend and believes that the hacker accessed the customer database. The developer offers several WordPress tools for backup, storage, and site management: UpdraftPlus: website backup and restoration plugin with more than 4 million downloads UpdraftCentral: for managing multiple sites remotely UpdraftVault: for cloud backup storage UpdraftClone: for creating staging websites "Over the weekend of 17-18 October we identified unauthorised access to the teamupdraft.com website," TeamUpdraft said in an advisory…

Read original article
Source
bleepingcomputer.com
Published
Oct 21, 2026
Mentions
5
language: en