Skip to content

CVE-2026-10795

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
October 19, 2026
Last Seen
October 19, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

An attacker has exploited stolen UpdraftCentral dashboard keys to install backdoor plugins on connected WordPress sites. The campaign, confirmed by TeamUpdraft, began on October 18 and has affected over 100 sites, with attacks still ongoing. The commands sent by the attacker are encrypted and signed...

Public Exploits

Checking GitHub for proof-of-concept code…