WordPress Backup Plugin Developer Hacked to Inject Malicious Code on Installed Sites

TeamUpdraft, the developer behind the UpdraftPlus WordPress backup plugin, has disclosed a website breach that exposed remote management keys. Attackers used those keys to install malicious plugins on connected WordPress sites, turning a trusted management feature into a route for running harmful code. The company identified unauthorized access to teamupdraft.com during October 17–18, 2026. Attackers […]

This article has been indexed from Cyber Security News

Read the original article: