Stolen UpdraftCentral keys used to backdoor WordPress sites
TeamUpdraft, developer of popular WordPress backup and security plugins, suffered a breach that exposed UpdraftCentral connection keys. These credentials can be leveraged by attackers to send commands to any WordPress sites connected via UpdraftCentral, posing a significant risk to website administrators using the plugin ecosystem.
Key points
- TeamUpdraft website was breached, exposing UpdraftCentral connection keys
- Compromised keys allow remote command execution on connected WordPress sites
- Affects users of popular WordPress backup and security plugins
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. BleepingComputer did the reporting; read the original for the full story.
Read the full story at BleepingComputer
