{"id":900725,"date":"2026-10-20T23:21:31","date_gmt":"2026-10-21T03:21:31","guid":{"rendered":"https:\/\/www.inmotionhosting.com\/support\/?p=900725"},"modified":"2026-10-20T23:43:00","modified_gmt":"2026-10-21T03:43:00","slug":"updraftcentral-connection-key-compromise","status":"publish","type":"post","link":"https:\/\/www.inmotionhosting.com\/support\/news\/updraftcentral-connection-key-compromise\/","title":{"rendered":"UpdraftCentral Connection Key Compromise: What WordPress Site Owners Should Do Now"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">On October 18 and 19, 2026, attackers used stolen UpdraftCentral keys to install backdoor plugins on WordPress sites. This UpdraftCentral connection key compromise affects any site, free or Premium, that holds an active UpdraftCentral cloud key. Updating UpdraftPlus alone does not remove a backdoor that is already installed. This article will be updated as TeamUpdraft publishes more information.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What Happened in the UpdraftCentral Connection Key Compromise<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Over the weekend of October 17 and 18, TeamUpdraft, the maker of UpdraftPlus, found unauthorized access to teamupdraft.com. It believes attackers reached its customer database. That database held names, email and billing addresses, order history, hashed passwords, and two-factor settings. It also held connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone. Card details were not stored, because Stripe and PayPal handle payments.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Researchers saw attackers use valid keys on October 18 and 19. They sent signed remote commands (<code>plugin.upload_plugin<\/code>, then <code>plugin.delete_plugin<\/code>) to connected sites. The commands ran with the rights of the WordPress user who created the connection.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">On October 19, TeamUpdraft released UpdraftPlus 1.26.12 (free) and 2.26.12 (Premium). Nethemba researchers report those builds did not delete keys. Just after 22:00 BST that night, TeamUpdraft released 1.26.13 and 2.26.13. At 16:25 BST on October 20, TeamUpdraft said the access is resolved and the new releases blocked the UpdraftCentral route. It still asks site owners to check their sites. Researchers saw new probing of cleaned sites on October 20.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Why updating does not finish the job<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">TeamUpdraft says 1.26.13 and 2.26.13 automatically disconnect UpdraftCentral connections created before 22:00 BST (21:00 UTC) on October 18. The Nethemba analysis found that keys created between 12:07 UTC and 21:00 UTC that day can survive the update anyway. Because of that gap, delete every key by hand after you update.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">You may have a key without knowing it<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">When you link UpdraftPlus to a teamupdraft.com account, the checkbox <strong>Add this website to UpdraftCentral<\/strong> is ticked by default. A site can hold a key even if you never used UpdraftCentral, and a key keeps working until you delete it. Self-hosted UpdraftCentral and the plugin downloads are not affected. Backups in your own remote storage are safe unless attackers reached the site through UpdraftCentral.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">What the backdoor looks like<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Some variants hide the plugin from the plugin list. A secret URL parameter with a 32-character token logs any visitor in as an administrator. That skips the login form and two-factor authentication. One variant creates an account that looks like an Editor but holds the <code>manage_options<\/code> and <code>install_plugins<\/code> capabilities. Some variants have a bug that causes HTTP 500 errors. Do not repair such a plugin, because fixing the bug activates the backdoor. Look for these signs:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>A plugin described as &#8220;Small maintenance toolkit: keeps option storage tidy.&#8221;, or named &#8220;Site Health Cache&#8221; or a random two- or three-word name.<\/li>\n\n\n\n<li>Unknown users such as <code>data-ops43<\/code> or <code>media-staff96<\/code>, with the display name &#8220;Site Tools&#8221; and an email at example.org or example.com.<\/li>\n\n\n\n<li>UpdraftCentral log lines reading &#8220;Command received: plugin.upload_plugin&#8221;.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">What This Means for Your Hosting<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">On October 20, 2026, InMotion Hosting deployed two web application firewall (ModSecurity) rules across all of its hosting platforms, including Shared, Reseller, WordPress Hosting, VPS, and Dedicated servers. One rule blocks the remote-command client the attackers use to push plugins through UpdraftCentral. The other blocks the login trigger the backdoor uses to sign an attacker in as an administrator. Together they stop the attackers from installing a new backdoor through that client and from using one that is already in place.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These rules do not remove a stolen key or a backdoor plugin that is already on your site, and attackers can change their tools. The stolen keys live inside each site&#8217;s UpdraftPlus settings, so still check each of your sites and follow the steps below. If you suspect a compromise, contact InMotion Hosting support. The guide <a href=\"https:\/\/www.inmotionhosting.com\/support\/security\/does-your-site-have-malware\/\">Does Your Site Have Malware?<\/a> explains how to check.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What You Should Do Now<\/h2>\n\n\n\n<p class=\"alert alert-warning wp-block-paragraph\"><strong>Warning:<\/strong> If your site shows any sign of compromise, treat it as compromised. Restore a backup taken before October 17, 2026, change all administrator passwords, log out all sessions, and re-authorize remote storage and rotate its keys.<\/p>\n\n\n\n<ol class=\"wp-block-list article_list\">\n<li>Log in to each site&#8217;s own WordPress dashboard directly, not through UpdraftCentral.<\/li>\n\n\n\n<li>Update <a href=\"https:\/\/wordpress.org\/plugins\/updraftplus\/\">UpdraftPlus<\/a> to 1.26.13 (free) or 2.26.13 (Premium) or later. Do not stop at 1.26.12 or 2.26.12.<\/li>\n\n\n\n<li>Go to <strong>Settings &gt; UpdraftPlus Backups &gt; Advanced Tools &gt; UpdraftCentral<\/strong> and delete every key under <strong>Manage existing keys<\/strong>, even after the update. Removing the site from the UpdraftCentral dashboard is not enough. Backups keep working, and only remote management stops.<\/li>\n\n\n\n<li>Check <strong>Users<\/strong> for unfamiliar Administrators or Editors, and check <strong>Plugins<\/strong>, including the Must-Use tab.<\/li>\n\n\n\n<li>Change your teamupdraft.com password (type the address yourself), change it anywhere you reused it, and reset two-factor in My Account. TeamUpdraft never emails to ask for passwords or keys.<\/li>\n\n\n\n<li>If you use UpdraftVault, reconnect it under <strong>Settings &gt; UpdraftPlus Backups &gt; Settings &gt; UpdraftVault<\/strong> with your new password. TeamUpdraft replaced all UpdraftClone client keys.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">With Secure Shell (SSH) access, the WordPress command-line tool (WP-CLI) can check for a key. If the first command prints key data, a key exists. An error that starts &#8220;Could not get &#8216;updraft_central_localkeys&#8217; option&#8221; means none is stored. The second command deletes it.<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono-NL.ttf\" style=\"font-size:clamp(16px, 1rem, 24px);font-family:Code-Pro-JetBrains-Mono-NL,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:clamp(26px, 1.625rem, 39px);--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><pre class=\"shiki github-dark\" style=\"background-color: #24292e\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #B392F0\">wp<\/span><span style=\"color: #E1E4E8\"> <\/span><span style=\"color: #9ECBFF\">option<\/span><span style=\"color: #E1E4E8\"> <\/span><span style=\"color: #9ECBFF\">get<\/span><span style=\"color: #E1E4E8\"> <\/span><span style=\"color: #9ECBFF\">updraft_central_localkeys<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono-NL.ttf\" style=\"font-size:clamp(16px, 1rem, 24px);font-family:Code-Pro-JetBrains-Mono-NL,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:clamp(26px, 1.625rem, 39px);--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><pre class=\"shiki github-dark\" style=\"background-color: #24292e\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #B392F0\">wp<\/span><span style=\"color: #E1E4E8\"> <\/span><span style=\"color: #9ECBFF\">option<\/span><span style=\"color: #E1E4E8\"> <\/span><span style=\"color: #9ECBFF\">delete<\/span><span style=\"color: #E1E4E8\"> <\/span><span style=\"color: #9ECBFF\">updraft_central_localkeys<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Free UpdraftPlus users with no teamupdraft.com account and no UpdraftCentral key need no action beyond keeping the plugin updated. For plugin basics, see the InMotion Hosting <a href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/updraftplus-backup-plugin\/\">UpdraftPlus guide<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For full details, read the <a href=\"https:\/\/teamupdraft.com\/blog\/security-incident-october-2026\/\">TeamUpdraft incident post<\/a>, the <a href=\"https:\/\/www.wordfence.com\/blog\/2026\/10\/updraftcentral-connection-key-compromise\/\">Wordfence advisory<\/a>, the <a href=\"https:\/\/patchstack.com\/articles\/updraftcentral-key-compromise-wordpress-backdoors\/\">Patchstack analysis<\/a>, and the <a href=\"https:\/\/nethemba.com\/updraftcentral-backdoor-analysis\/\">Nethemba backdoor analysis<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On October 18 and 19, 2026, attackers used stolen UpdraftCentral keys to install backdoor plugins on WordPress sites. This UpdraftCentral connection key compromise affects any site, free or Premium, that holds an active UpdraftCentral cloud key. Updating UpdraftPlus alone does not remove a backdoor that is already installed. This article will be updated as TeamUpdraft<a class=\"moretag\" href=\"https:\/\/www.inmotionhosting.com\/support\/news\/updraftcentral-connection-key-compromise\/\"> Read More ><\/a><\/p>\n","protected":false},"author":57032,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_ayudawp_aiss_exclude":false,"_ayudawp_aiss_exclude_summary":false,"_ayudawp_aiss_summary":"This UpdraftCentral connection key compromise affects any site, free or Premium, that holds an active UpdraftCentral cloud key. A site can hold a key even if you never used UpdraftCentral, and a key keeps working until you delete it. Free UpdraftPlus users with no teamupdraft.com account and no UpdraftCentral key need no action beyond keeping the plugin updated.","_ayudawp_aiss_summary_provider":"extractive","_ayudawp_aiss_summary_hash":"0a79d085520b82105114978a5178cf0bb264f8c3","_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[4300],"tags":[],"class_list":["post-900725","post","type-post","status-publish","format-standard","hentry","category-news"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>UpdraftCentral Connection Key Compromise: Act Now<\/title>\n<meta name=\"description\" content=\"The UpdraftCentral connection key compromise lets attackers install backdoors on WordPress sites. Check your site and fix it today.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.inmotionhosting.com\/support\/news\/updraftcentral-connection-key-compromise\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"UpdraftCentral Connection Key Compromise: Act Now\" \/>\n<meta property=\"og:description\" content=\"The UpdraftCentral connection key compromise lets attackers install backdoors on WordPress sites. Check your site and fix it today.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.inmotionhosting.com\/support\/news\/updraftcentral-connection-key-compromise\/\" \/>\n<meta property=\"og:site_name\" content=\"InMotion Hosting Support Center\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/inmotionhosting\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-21T03:21:31+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-21T03:43:00+00:00\" \/>\n<meta name=\"author\" content=\"Derrell\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@InMotionHosting\" \/>\n<meta name=\"twitter:site\" content=\"@InMotionHosting\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Derrell\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/news\\\/updraftcentral-connection-key-compromise\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/news\\\/updraftcentral-connection-key-compromise\\\/\"},\"author\":{\"name\":\"Derrell\",\"@id\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/#\\\/schema\\\/person\\\/0736f70b4077032374f89709cdc255b7\"},\"headline\":\"UpdraftCentral Connection Key Compromise: What WordPress Site Owners Should Do Now\",\"datePublished\":\"2026-10-21T03:21:31+00:00\",\"dateModified\":\"2026-10-21T03:43:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/news\\\/updraftcentral-connection-key-compromise\\\/\"},\"wordCount\":900,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/#organization\"},\"articleSection\":[\"News \\\/ Announcements\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/news\\\/updraftcentral-connection-key-compromise\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/news\\\/updraftcentral-connection-key-compromise\\\/\",\"url\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/news\\\/updraftcentral-connection-key-compromise\\\/\",\"name\":\"UpdraftCentral Connection Key Compromise: Act Now\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/#website\"},\"datePublished\":\"2026-10-21T03:21:31+00:00\",\"dateModified\":\"2026-10-21T03:43:00+00:00\",\"description\":\"The UpdraftCentral connection key compromise lets attackers install backdoors on WordPress sites. Check your site and fix it today.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/news\\\/updraftcentral-connection-key-compromise\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/news\\\/updraftcentral-connection-key-compromise\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/news\\\/updraftcentral-connection-key-compromise\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"UpdraftCentral Connection Key Compromise: What WordPress Site Owners Should Do Now\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/#website\",\"url\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/\",\"name\":\"InMotion Hosting Support Center\",\"description\":\"Web Hosting Support &amp; Tutorials\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/#organization\",\"name\":\"InMotion Hosting\",\"url\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/wp-content\\\/uploads\\\/2023\\\/02\\\/inmotion-hosting-logo-yoast.jpg\",\"contentUrl\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/wp-content\\\/uploads\\\/2023\\\/02\\\/inmotion-hosting-logo-yoast.jpg\",\"width\":696,\"height\":696,\"caption\":\"InMotion Hosting\"},\"image\":{\"@id\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/inmotionhosting\\\/\",\"https:\\\/\\\/x.com\\\/InMotionHosting\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/#\\\/schema\\\/person\\\/0736f70b4077032374f89709cdc255b7\",\"name\":\"Derrell\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/derrell-willis\"],\"url\":\"https:\\\/\\\/www.inmotionhosting.com\\\/support\\\/author\\\/derrellw\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"UpdraftCentral Connection Key Compromise: Act Now","description":"The UpdraftCentral connection key compromise lets attackers install backdoors on WordPress sites. Check your site and fix it today.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.inmotionhosting.com\/support\/news\/updraftcentral-connection-key-compromise\/","og_locale":"en_US","og_type":"article","og_title":"UpdraftCentral Connection Key Compromise: Act Now","og_description":"The UpdraftCentral connection key compromise lets attackers install backdoors on WordPress sites. Check your site and fix it today.","og_url":"https:\/\/www.inmotionhosting.com\/support\/news\/updraftcentral-connection-key-compromise\/","og_site_name":"InMotion Hosting Support Center","article_publisher":"https:\/\/www.facebook.com\/inmotionhosting\/","article_published_time":"2026-10-21T03:21:31+00:00","article_modified_time":"2026-10-21T03:43:00+00:00","author":"Derrell","twitter_card":"summary_large_image","twitter_creator":"@InMotionHosting","twitter_site":"@InMotionHosting","twitter_misc":{"Written by":"Derrell","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.inmotionhosting.com\/support\/news\/updraftcentral-connection-key-compromise\/#article","isPartOf":{"@id":"https:\/\/www.inmotionhosting.com\/support\/news\/updraftcentral-connection-key-compromise\/"},"author":{"name":"Derrell","@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/0736f70b4077032374f89709cdc255b7"},"headline":"UpdraftCentral Connection Key Compromise: What WordPress Site Owners Should Do Now","datePublished":"2026-10-21T03:21:31+00:00","dateModified":"2026-10-21T03:43:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.inmotionhosting.com\/support\/news\/updraftcentral-connection-key-compromise\/"},"wordCount":900,"commentCount":0,"publisher":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#organization"},"articleSection":["News \/ Announcements"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.inmotionhosting.com\/support\/news\/updraftcentral-connection-key-compromise\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.inmotionhosting.com\/support\/news\/updraftcentral-connection-key-compromise\/","url":"https:\/\/www.inmotionhosting.com\/support\/news\/updraftcentral-connection-key-compromise\/","name":"UpdraftCentral Connection Key Compromise: Act Now","isPartOf":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#website"},"datePublished":"2026-10-21T03:21:31+00:00","dateModified":"2026-10-21T03:43:00+00:00","description":"The UpdraftCentral connection key compromise lets attackers install backdoors on WordPress sites. Check your site and fix it today.","breadcrumb":{"@id":"https:\/\/www.inmotionhosting.com\/support\/news\/updraftcentral-connection-key-compromise\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.inmotionhosting.com\/support\/news\/updraftcentral-connection-key-compromise\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.inmotionhosting.com\/support\/news\/updraftcentral-connection-key-compromise\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.inmotionhosting.com\/support\/"},{"@type":"ListItem","position":2,"name":"UpdraftCentral Connection Key Compromise: What WordPress Site Owners Should Do Now"}]},{"@type":"WebSite","@id":"https:\/\/www.inmotionhosting.com\/support\/#website","url":"https:\/\/www.inmotionhosting.com\/support\/","name":"InMotion Hosting Support Center","description":"Web Hosting Support &amp; Tutorials","publisher":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.inmotionhosting.com\/support\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.inmotionhosting.com\/support\/#organization","name":"InMotion Hosting","url":"https:\/\/www.inmotionhosting.com\/support\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/","url":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg","contentUrl":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg","width":696,"height":696,"caption":"InMotion Hosting"},"image":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/inmotionhosting\/","https:\/\/x.com\/InMotionHosting"]},{"@type":"Person","@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/0736f70b4077032374f89709cdc255b7","name":"Derrell","sameAs":["https:\/\/www.linkedin.com\/in\/derrell-willis"],"url":"https:\/\/www.inmotionhosting.com\/support\/author\/derrellw\/"}]}},"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","primary_category":{"id":4300,"name":"News \/ Announcements","slug":"news","link":"https:\/\/www.inmotionhosting.com\/support\/news\/"},"_links":{"self":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts\/900725","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/users\/57032"}],"replies":[{"embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/comments?post=900725"}],"version-history":[{"count":3,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts\/900725\/revisions"}],"predecessor-version":[{"id":900732,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts\/900725\/revisions\/900732"}],"wp:attachment":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/media?parent=900725"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/categories?post=900725"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/tags?post=900725"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}