WordPress News

UpdraftPlus 1.26.6 Released

high confidence based on 1 community posts

What’s new in UpdraftPlus 1.26.6

Released: 23/Jul/2026

Active installations: 3,000,000

Tested up to WordPress 7.0.2

FEATURE: Upon plugin deactivation, a popup will appear with data removal options, enabling users to opt-in to deleting saved data.
FIX: “Unattached” media filter lists attached images when no unattached items exist
TWEAK: Added Burst Statistics to TeamUpdraft family admin notices.
TWEAK: Create a better UX for free users around premium remote storage locations
TWEAK: Prefer http_get_last_response_headers() (PHP 8.4+) to avoid PHP 8.5 deprecation warnings for $http_response_header.
TWEAK: Replace the calls to the native PHP ‘unserialize()’ function in the Google Drive and HTTP_Request2 libraries.

1.26.5 — 05/Jun/2026

SECURITY: Previous versions contained a defect allowing sites with an active Migrator key (paid versions only) or UpdraftCentral key (free and paid versions) to have unauthorised operations carried out on them. All users should update immediately.
TWEAK: Added explicit HTTP timeout of 60 seconds to pCloud chunk upload requests to prevent cURL error 28 on slow server connections
TWEAK: Guard curl_close(), finfo_close() and xml_parser_free() calls with a PHP version check to prevent deprecation warnings on PHP 8.5+
TWEAK: Update the bundled common-libs version
TWEAK: Replace all usages of wpdb::esc_like() with UpdraftPlus_Database_Utility::esc_like() across the codebase to maintain consistency.

1.26.4 — 07/May/2026

FIX: In version 1.26.2, a regression prevented the backup schedule, including the day name or number, as well as backup entity exclusion rules, from being saved.
TWEAK: Alert users who wrongly enter URLs instead of an actual hostname for SFTP and FTP remote storage.
TWEAK: Updated DreamObjects endpoints by removing the deprecated objects-us-west-1, marking objects-us-east-1.dream.io as unavailable (Nov. 12th, 2025), and adding admin notices to inform users of this change.
TWEAK: get_structured_data() now accepts params to avoid timeouts.