PSA: UpdraftCentral Connection Key Compromise Used to Install Malicious Plugins on WordPress Sites

Reported by Wordfence (Alex Thomas)

Summary by Cyber Security News19 Oct 2026, 22:02 CET

About this summary. This is a short excerpt from the description that Wordfence published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.wordfence.com/blog/2026/10/updraftcentral-connection-key-compromise/

TeamUpdraft has disclosed unauthorized access to its teamupdraft.com website over the weekend of October 17-18, 2026. The company believes its customer database was accessed and says that database contained connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, along with customer account information.

Read the full article at Wordfence →

Source attribution: headline and facts are from Wordfence (wordfence.com). Summary method: excerpt of the source description. See our source attribution policy.