Check System Status
Check our status page to see if we're already working on the issue
NOTE: If you have a VPS and know you use PHP 5 through 7.3, please get in touch for verification of updates. All other PHP versions have been patched. PHP2Shell (CVE-2026-109618 and CVE-2026-109619) is a arbitrary code execution vulnerability reported in October 2026 in the common web scripting language PHP.The existence of the vulnerability ... Read More... »
Since October 18, an attacker has been installing backdoors on UpdraftPlus sites. They use remote-access keys that appear to have leaked from TeamUpdraft’s cloud service. The commands are validly signed, so your sites accept them as legitimate, and updating the UpdraftPlus plugin won’t stop it. We highly recommend disabling / removing Updraft ... Read More... »
