CONNECT WITH US
Tech

Tech

UpdraftPlus WordPress Plugin Security Breach Enables Backdoor Attacks via @sejournal, @martinibuster

Search Engine Journal logo

Published on

Add as a preferred source on Google
UpdraftPlus WordPress Plugin Security Breach Enables Backdoor Attacks via @sejournal, @martinibuster

Hackers installed backdoors on WordPress websites using stolen security keys, exposing over 3 million active installations of UpdraftPlus.

A security breach affecting UpdraftPlus, a WordPress backup plugin installed on over 3 million websites, enabled attackers to install malicious plugins and create unauthorized administrator accounts. The attack exploited compromised UpdraftCentral connection keys, allowing attackers to take control of connected WordPress websites without needing a username or password.

TeamUpdraft confirmed that its website was compromised over the weekend of October 17-18, 2026. The company believes attackers accessed its customer database, which contained customer information and connection keys for services including UpdraftCentral. Those compromised keys enabled attackers to gain control of connected WordPress websites.

A TeamUpdraft blog post explained that the unauthorized access route at the heart of the breach was closed, that the potentially compromised credentials were replaced, and that security updates were released that revoke older UpdraftCentral connections.

The updates, UpdraftPlus 1.26.13 for the free version and 2.26.13 for the premium version, were released on October 19, 2026.

The plugin changelog describes the updates as revoking UpdraftCentral Cloud keys, with version 1.26.13 correcting how the revocation was applied in the preceding release. The updates automatically disconnect affected websites from UpdraftCentral, blocking further access through that route.

The company also reported that WordPress.org had pushed the updated plugin to users automatically.

The UpdraftPlus plugin is used by WordPress websites to create backups, restore websites, and migrate sites to different hosting providers or domain names. It supports automated backups and enables website owners to store backup copies of their websites on services such as Google Drive, Dropbox, and Amazon S3.


Source link
Related Topics:Tech

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.