Current advisories, security updates and news around WordPress, e-commerce and hosting.
22 June 2026
An actively exploited, critical vulnerability in the UpdraftPlus WordPress backup plugin allows full site takeover. Versions up to and including 1.26.4 are affected — please update to 1.26.5 immediately.