# Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites

**URL:** <https://forums.thehomestack.io/t/attackers-abuse-updraftcentral-keys-to-plant-backdoors-on-wordpress-sites/26526>\
**Category:** The Hacker News\
**Created:** [October 21, 2026, 9:53am UTC](https://forums.thehomestack.io/t/attackers-abuse-updraftcentral-keys-to-plant-backdoors-on-wordpress-sites/26526 "2026-10-21T09:53:51Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![robinhood1995](https://forums.thehomestack.io/letter_avatar_proxy/v4/letter/r/48db29/32.png) [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\
**Post date:** [October 21, 2026, 9:53am UTC](https://forums.thehomestack.io/t/attackers-abuse-updraftcentral-keys-to-plant-backdoors-on-wordpress-sites/26526/1 "2026-10-21T09:53:51Z")

</div>

Unknown threat actors breached TeamUpdraft’s website and potentially gained unauthorized access to customers’ connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, using them to backdoor WordPress sites.

TeamUpdraft is the developer behind UpdraftPlus, a popular WordPress backup plugin with over four million active installations. The vendor also offers UpdraftCentral, a remote

* * *
This is a companion discussion topic for the original entry at [https://thehackernews.com/2026/10/attackers-abuse-updraftcentral-keys-to.html](https://thehackernews.com/2026/10/attackers-abuse-updraftcentral-keys-to.html)