WordPress News
UpdraftPlus 1.26.14 Released
What’s new in UpdraftPlus 1.26.14
Released: 26/Oct/2026
Active installations: 3,000,000
Tested up to WordPress 7.1.3
Changelog
- FEATURE: SFTP/SCP remote storage now supports modern host key algorithms like Ed25519 and also new cryptographies
- FEATURE: Improve the restoration of the ‘uploads’ entity to be more efficient, and add the ‘UPDRAFTPLUS_RESTORE_DELETE_OLD_UPLOAD_FILES’ constant to allow the deletion of leftover files in the ‘uploads’ directory that are not part of the backup file
- FIX: Fixed a JS error and incorrect checkbox state handling on the auto-backup before update prompt.
- FIX: Prevent a fatal TypeError on PHP 8+ when an admin URL contains an “action” query argument as an array.
- TWEAK: Disabled the option to automatically add websites to UDCentral upon connection by default. Users must now explicitly enable this option if they want websites to be added automatically upon connection.
- TWEAK: Adjusted the Abort Backup popup icon sizing and added the missing “X” icon to the Close button on the backup completion popup.
- TWEAK: Avoid warning by handling $_ENV variable.
- TWEAK: Change the ‘pre_database_backup_setup’ action hook name to ‘updraftplus_pre_database_backup_setup’
- TWEAK: Check the existence of the user’s folder before doing any UpdraftVault storage-related oprations to ensure the same directory is used even if the home/site URL has changed from using “www” to without using “www” or vice versa.
- TWEAK: Enforce the WordPress DISALLOW_FILE_MODS constant to block all restore operations (including database) via the admin UI, WP-CLI, and the core restore method.
- TWEAK: Ensure SFTP/SCP remote storage works with the phpseclib3 library upgrade, including SCP mode, Ed25519 SSH keys, database restores and rescans
- TWEAK: Exclude the unused common-libs sub-libraries updraft-tasks and updraft-theme from the build to reduce the plugin size
Previous releases
1.26.13 — 19/Oct/2026
- FIX: Properly apply the revocation in 1.26.12
1.26.12 — 19/Oct/2026
- SECURITY: Revokes UpdraftCentral Cloud keys created before the incident described at https://teamupdraft.com/blog/security-incident-october-2026/ .