#CVE-2026-10795

Stolen UpdraftCentral keys turn into a WordPress backdoor spree

Attackers breached plugin maker TeamUpdraft, lifted remote-management keys, and are installing fake maintenance plugins on live sites.