pwn.watch: UpdraftPlus incident updates https://pwn.watch/t/updraftplus Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Tue, 20 Oct 2026 00:00:00 GMT [high] TeamUpdraft / UpdraftCentral keys stolen; WordPress sites backdoored https://pwn.watch/i/updraftcentral-keys-wordpress-backdoor https://pwn.watch/i/updraftcentral-keys-wordpress-backdoor Tue, 20 Oct 2026 00:00:00 GMT high <p>UK plugin maker TeamUpdraft said attackers breached its website, stole UpdraftCentral connection keys, and used them to backdoor WordPress sites running UpdraftPlus/UpdraftCentral.</p> <p><strong>Status:</strong> closed ยท <strong>Patch:</strong> partial</p>