Rocket.net
← Back to status

Security Advisory: UpdraftPlus WordPress Plugin Vulnerability

Resolved Oct 19, 2026 04:36 EDT

Incident Updates

  • Resolved 2 weeks ago · Oct 21, 2026 02:14 EDT

    The potential security threat has been addressed, and the issue is now resolved. For more information about the incident and the steps taken by the UpdraftPlus team, please refer to their official security incident update: https://teamupdraft.com/blog/security-incident-october-2026/ Rocket.net will continue monitoring security developments to help protect our customers' websites. Thank you for your patience and understanding. The Rocket.net Team

  • Identified 2 weeks ago · Oct 19, 2026 04:39 EDT

    Our security team is actively monitoring reports of a potential zero-day vulnerability affecting the UpdraftPlus WordPress plugin. The reported exploit may allow attackers to upload malicious backdoor files and compromise affected WordPress websites. At this time, no official security patch has been confirmed. Actions Taken by Rocket.net To help protect our customers and maintain the security and integrity of their websites, Rocket.net is taking proactive measures to address this potential threat. Our team is assessing the risk and evaluating appropriate protective actions. We will continue to monitor developments closely and review any security updates released by the UpdraftPlus developers. Once a verified patch is available and the vulnerability has been adequately addressed, we will provide further guidance on when it is safe to resume using the plugin. We appreciate your understanding as we prioritize the security of your websites and work to respond responsibly to emerging threats. The Rocket.net Team