Uncanny Automator Breach: Backdoored Plugin Build Hit WordPress Sites

Uncanny Automator’s update infrastructure was compromised on June 12, 2026: attackers swapped the Pro plugin update for a backdoored build (v7.3.0.5) that delivered malware/backdoors to sites checking for updates and also accessed the licensing database, exposing names, emails, license keys and site URLs. The tampered build affected fewer than 6% of sites over ~21 hours; Uncanny Owl removed attacker access, released a clean 7.3.0.6, reset passwords, and cleaned infrastructure, but infected sites require full remediation and leaked contact data raises phishing risks.