<![CDATA[Stolen UpdraftCentral keys used to backdoor WordPress sites]]>A threat actor has breached the website of TeamUpdraft, the developer behind widely used WordPress backup and security plugins, in an incident that may have exposed UpdraftCentral connection keys. These keys are significant because they allow commands to be sent to connected WordPress sites, meaning stolen keys could potentially be abused to backdoor those installations.

At this stage, the exact scope of the compromise and the number of affected sites are not fully clear. Site administrators running UpdraftPlus or other TeamUpdraft products connected to UpdraftCentral should treat their connection keys as potentially compromised and review their installations for signs of unauthorized access. Rotating keys and auditing connected sites is advisable until official guidance confirms the full impact.

Source: BleepingComputer

Has your organization rotated UpdraftCentral keys or audited connected WordPress sites in response to this disclosure?

]]>https://xploitlk.com/topic/750/stolen-updraftcentral-keys-used-to-backdoor-wordpress-sitesRSS for NodeTue, 27 Oct 2026 07:23:32 GMTThu, 22 Oct 2026 10:30:18 GMT60