suspectedhighSupply chainFirst reported Oct 21, 2026 · Updated Oct 21, 2026
TeamUpdraft: breach of developer site exposed keys used to push malicious plugins to WordPress sites
TeamUpdraft, developer of the UpdraftPlus WordPress backup plugin, disclosed unauthorized access to teamupdraft.com on October 17-18, 2026 that exposed remote management keys. Attackers used those keys to install malicious plugins on connected WordPress sites, enabling execution of harmful code.
Members only
The full record: the timeline (2 updates) and 4 linked reports
- Every update as it happened, with the status at each step
- Every report behind the record, newest first
- Alerts the moment TeamUpdraft — or anything else you track — is hit again
A free account is all it takes — no card, one minute.