Check System Status
Check our status page to see if we're already working on the issue
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) is a arbitrary code execution vulnerability reported in October 2026 in the common web scripting language PHP.The existence of the vulnerability was announced on 20 October and an emergency patch will be released on 21 October at 14:00 UTC together with all other information about the ... Read More... »
Since October 18, an attacker has been installing backdoors on UpdraftPlus sites. They use remote-access keys that appear to have leaked from TeamUpdraft’s cloud service. The commands are validly signed, so your sites accept them as legitimate, and updating the UpdraftPlus plugin won’t stop it. We highly recommend disabling / removing Updraft ... Read More... »
