# Stolen UpdraftCentral keys used to backdoor WordPress sites

**URL:** <https://forums.thehomestack.io/t/stolen-updraftcentral-keys-used-to-backdoor-wordpress-sites/26520>\
**Category:** Bleeping Computer\
**Created:** [October 21, 2026, 1:35am UTC](https://forums.thehomestack.io/t/stolen-updraftcentral-keys-used-to-backdoor-wordpress-sites/26520 "2026-10-21T01:35:34Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![robinhood1995](https://forums.thehomestack.io/letter_avatar_proxy/v4/letter/r/48db29/32.png) [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\
**Post date:** [October 21, 2026, 1:35am UTC](https://forums.thehomestack.io/t/stolen-updraftcentral-keys-used-to-backdoor-wordpress-sites/26520/1 "2026-10-21T01:35:36Z")

</div>

A threat actor breached TeamUpdraft’s website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral connection keys that can send commands to connected websites. […]

* * *
This is a companion discussion topic for the original entry at [https://www.bleepingcomputer.com/news/security/stolen-updraftcentral-keys-used-to-backdoor-wordpress-sites/](https://www.bleepingcomputer.com/news/security/stolen-updraftcentral-keys-used-to-backdoor-wordpress-sites/)