Skip to content
PluginCanary

All-in-One WP Migration and Backup

by ServMask · 5,000,000+ active installs · Checked 3 Nov 2026
Watch5 Warnings

Watch: recent reviews average 2.5 stars vs 4.5 lifetime.

77/ 100 Canary Score
Sub-scores for All-in-One WP Migration and Backup
Ownership100
Maintenance100
Security50
Support86
Reputation45

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningREP-1Recent reviews average 2.5 stars vs 4.5 lifetime. Review this plugin.4 Nov 2026Evidence
  • WarningSEC-1Vulnerability published 16 Sep 2026, fixed in 7.111. Update to version 7.111 or later.16 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 16 Sep 2026, fixed in 7.111. Update to version 7.111 or later.16 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 24 Aug 2026, fixed in 7.110. Update to version 7.110 or later.24 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 20 Aug 2026, fixed in 7.108. Update to version 7.108 or later.20 Aug 2026Evidence
  • InfoSEC-37 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
yani.iliev7 Jan 2014 to 7 Oct 2026, 138 commits
bangelov19 Jan 2014 to 27 Oct 2026, 480 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
8 days ago
Releases, 24 months
38
Tested up to
7.1 current
Requires PHP
5.3 supported 8.2+
Releases per quarter for All-in-One WP Migration and Backup
Q1 20241
Q2 20240
Q3 20240
Q4 20240
Q1 20253
Q2 20257
Q3 20253
Q4 202513
Q1 20262
Q2 20263
Q3 20265
Q4 20262

Last release 27 Oct 2026. Tested with WordPress 7.1 (current).

Support

86% of 7 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
16 Sep 2026All-in-One WP Migration and Backup <= 7.110 - Unauthenticated Insufficient Credential Protection via Authorization Basic Header5.3<= 7.1107.1110
16 Sep 2026All-in-One WP Migration and Backup <= 7.110 - Authenticated (Admin+) Privilege Escalation4.7<= 7.1107.1110
24 Aug 2026All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution8.8<= 7.1097.1100
20 Aug 2026All-in-One WP Migration and Backup < 7.108 - Authenticated (Administrator+) Remote Code Execution7.2< 7.1087.1080
29 Jun 2026All-in-One WP Migration and Backup <= 7.105 - Missing Authorization5.3<= 7.1057.1060
26 Aug 2025All-in-One WP Migration and Backup <= 7.97 - Authenticated (Administrator+) Stored Cross-Site Scripting via Import4.4<= 7.977.980
12 Mar 2025All in One WP Migration <= 7.89 - Unauthenticated PHP Object Injection7.5<= 7.897.90207
27 Oct 2024All-in-One WP Migration and Backup <= 7.86 - Authenticated (Administrator+) Arbitrary PHP Code Injection7.2<= 7.867.87343
21 Oct 2024All-in-One WP Migration and Backup <= 7.86 - Unauthenticated Information Disclosure via Error Logs5.3<= 7.867.87349
23 Aug 2022All-in-One WP Migration <= 7.62 - Unauthenticated Reflected Cross-Site Scripting6.1<= 7.627.63217
15 Aug 2022All-in-One WP Migration <= 7.62 - Authenticated (Admin+) Cross-Site Scripting5.5<= 7.627.63225
28 Apr 2022All-in-One WP Migration <= 7.58 - Directory Traversal to File Deletion on Windows Hosts6.6<= 7.587.59235
7 Feb 2022All-in-One WP Migration <= 7.40 - Authenticated (Admin+) Arbitrary File Upload7.2<= 7.407.41105
20 Jan 2020All-in-One WP Migration <= 7.14 - Unauthenticated Backup Download5.9< 7.157.15598
18 Jul 2019All-in-One WP Migration <= 6.97 - Authenticated Stored Cross-Site Scripting5.5< 7.07.042
20 Jun 2017All-in-One WP Migration <= 6.45 - Reflected Cross-Site Scripting6.1< 6.466.46800
19 Mar 2015All-in-One WP Migration <= 2.0.4 - Missing Authorization to Database Export7.5<= 2.0.42.0.51156
5 Nov 2014All-in-One WP Migration <= 2.0.2 - Authorization Bypass to Arbitrary File Upload8.8<= 2.0.22.0.31290

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for All-in-One WP Migration and Backup
Q2 20263.0
Q3 20262.8
Q4 20262.0

Average rating fell from 3.0 to 2.0 between Q2 2026 and Q4 2026.

Rating distribution
5 star6388
4 star217
3 star108
2 star91
1 star872
Latest low reviews

Momentum

5,000,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for All-in-One WP Migration and Backup
4 May 2026100,264
11 May 2026205,605
18 May 2026329,531
25 May 2026180,582
1 Jun 2026158,165
8 Jun 2026152,453
15 Jun 2026144,124
22 Jun 20261,232,030
29 Jun 2026314,047
6 Jul 2026393,388
13 Jul 2026205,136
20 Jul 20261,331,182
27 Jul 2026330,009
3 Aug 2026423,679
10 Aug 20261,498,625
17 Aug 20261,507,440
24 Aug 2026353,470
31 Aug 2026427,637
7 Sep 2026185,972
14 Sep 20261,460,592
21 Sep 2026325,411
28 Sep 2026213,598
5 Oct 20261,424,334
12 Oct 2026243,226
19 Oct 2026322,800
26 Oct 20261,492,226
2 Nov 202657,178

Weekly downloads over the last 4 weeks are 5% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Migrate Guru - Site Migration & CloningScore 95 · 200,000+Duplicator - Backups & Migration Plugin - Cloud Backups, Scheduled Backups, & MoreScore 93 · 1,000,000+SiteGround MigratorScore 91 · 80,000+DreamHost Automated MigrationScore 91 · 20,000+Cloudways WordPress MigratorScore 91 · 10,000+

Facts

Version7.113
AuthorServMask
Added7 Jan 2014
Last updated27 Oct 2026
Active installs5,000,000+
Requires WordPress3.3
Tested up to7.1.4
Requires PHP5.3
CategorySite Administration & Utilities > Site Migration & Cloning
Tagsclone, backup, migrate, export-import, move wordpress

Questions

Is All-in-One WP Migration and Backup still maintained?

All-in-One WP Migration and Backup was last updated on 27 Oct 2026. Its Canary status is Watch.

Is All-in-One WP Migration and Backup safe?

All-in-One WP Migration and Backup has no open unpatched vulnerabilities on record. 7 vulnerabilities were published in the last 24 months. Its Canary status is Watch.

Who owns All-in-One WP Migration and Backup?

The wordpress.org author is ServMask. Recent committers: bangelov, yani.iliev, plugin-master. We have recorded no ownership change.

What can I use instead of All-in-One WP Migration and Backup?

Plugins in the same category with a higher Canary Score: Migrate Guru - Site Migration & Cloning, Duplicator - Backups & Migration Plugin - Cloud Backups, Scheduled Backups, & More, SiteGround Migrator, DreamHost Automated Migration, Cloudways WordPress Migrator.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue