Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

UpdraftPlus

Security incidents tagged UpdraftPlus. Newest first.

Incidents
1
Live
0
Patched
0
Days without an incident
2
Longest quiet run: 4 days (Oct 19–Oct 22)
  • HighPartly patched

    TeamUpdraft / UpdraftCentral keys stolen; WordPress sites backdoored

    UK plugin maker TeamUpdraft said attackers breached its website, stole UpdraftCentral connection keys, and used them to backdoor WordPress sites running UpdraftPlus/UpdraftCentral.

    UpdraftPlus / UpdraftCentral (WordPress)Closed Oct 20, 2026

1 UpdraftPlus incident in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½LessMore