Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites
MentionsWordPress
Unknown threat actors breached TeamUpdraft's website and potentially gained unauthorized access to customers' connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, using them to backdoor WordPress sites. TeamUpdraft is the developer behind UpdraftPlus, a popular WordPress backup plugin with over four million active installations. The vendor also offers UpdraftCentral, a remote
Summary from The Hacker News.
Related coverage
Other sources covering the same vulnerabilities or event.