Unauthorized Access to UpdraftCentral Keys Enables Backdoor Exploits on WordPress Sites

Threat actors exploited a breach of TeamUpdraft's website to access connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, enabling them to compromise WordPress sites. The attack highlights vulnerabilities in credential management and the risks of third-party service dependencies.

Unknown threat actors breached TeamUpdraft's website and potentially gained unauthorized access to customers' connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, using them to backdoor WordPress sites.

TeamUpdraft is the developer behind UpdraftPlus, a popular WordPress backup plugin with over four million active installations. The vendor also offers UpdraftCentral, a remote

Read original article