Skip to content
PluginCanary

BackWPup - WordPress Backup & Restore Plugin

by WP Media · 400,000+ active installs · Checked 3 Nov 2026
Healthy4 Warnings

Healthy: vulnerability published 8 Oct 2026, fixed in 5.7.7.

85/ 100 Canary Score
Sub-scores for BackWPup - WordPress Backup & Restore Plugin
Ownership100
Maintenance100
Security60
Support94
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 8 Oct 2026, fixed in 5.7.7. Update to version 5.7.7 or later.8 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 8 Oct 2026, fixed in 5.7.7. Update to version 5.7.7 or later.8 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 8 Oct 2026, fixed in 5.7.7. Update to version 5.7.7 or later.8 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 11 Sep 2026, fixed in 5.7.5. Update to version 5.7.5 or later.11 Sep 2026Evidence
  • InfoSEC-38 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
danielhuesken5 Jul 2009 to 11 Jun 2021, 680 commits
nullbyte1 May 2013 to 16 Aug 2023, 44 commits
vanvox25 Apr 2017 to 4 May 2020, 76 commits
cocreation25 Apr 2017 to 12 Mar 2024, 52 commits
wido8 Oct 2018 to 23 Jan 2019, 12 commits
darioinpsyde17 Oct 2018 to 3 Feb 2023, 94 commits
dinamiko25 Feb 2019 to 11 Jun 2021, 20 commits
nareknovembit11 Nov 2022 to 11 Nov 2022, 7 commits
backwpup4 Jun 2024 to 14 Oct 2026, 88 commits
wp_media3 Sep 2025 to 3 Sep 2025, 1 commits

10 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
21 days ago
Releases, 24 months
45
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for BackWPup - WordPress Backup & Restore Plugin
Q1 20242
Q2 20243
Q3 20242
Q4 20243
Q1 20258
Q2 20258
Q3 20256
Q4 20254
Q1 20265
Q2 20268
Q3 20263
Q4 20262

Last release 14 Oct 2026. Tested with WordPress 7.1 (current).

Support

94% of 17 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
8 Oct 2026BackWPup – WordPress Backup & Restore Plugin < 5.7.7 - Unauthenticated Information Exposure5.3< 5.7.75.7.70
8 Oct 2026BackWPup – WordPress Backup & Restore Plugin 3.3 - 5.7.6 - Missing Authorization5.33.3 to 5.7.65.7.70
8 Oct 2026BackWPup – WordPress Backup & Restore Plugin < 5.7.7 - Authenticated (Administrator+) Path Traversal4.9< 5.7.75.7.70
11 Sep 2026BackWPup – WordPress Backup & Restore Plugin 5.2.2 - 5.7.4 - Missing Authorization4.35.2.2 to 5.7.45.7.50
27 Jul 2026BackWPup <= 5.7.4 - Unauthenticated Stored Cross-Site Scripting7.2<= 5.7.45.7.50
13 Apr 2026BackWPup <= 5.6.6 - Authenticated (Administrator+) Local File Inclusion via 'block_name' Parameter7.2<= 5.6.65.6.70
18 Feb 2026BackWPup 5.0.0 - 5.6.2 - Authenticated (BackWPup Helper+) Privilege Escalation via Arbitrary Options Update7.25.0.0 to 5.6.25.6.30
24 Oct 2025BackWPup 5 - 5.5.0 - Missing Authorization to Sensitive Information Exposure5.35 to 5.5.05.5.10
16 Aug 2024BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal6.8<= 4.0.14.0.20
23 Feb 2024BackWPup <= 4.0.2 - Plaintext Storage of Backup Destination Password2.2<= 4.0.24.0.30
18 Dec 2023BackWPup <= 4.0.3 - Sensitive Information Exposure7.5<= 4.0.34.0.485
22 Nov 2023BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal8.7<= 4.0.14.0.21
8 Sep 2017BackWPup <= 3.4.1 - Unauthenticated Backup Download7.5< 3.4.23.4.220
21 Aug 2013BackWPup < 3.0.13 - Cross-Site Scripting6.1< 3.0.133.0.130
28 Mar 2011BackWPup <= 1.7.1 - Remote File Inclusion9.8<= 1.7.11.7.26
2 Mar 2011BackWPup – WordPress Backup Plugin < 1.4.1 - Directory Traversal7.5< 1.4.11.4.10

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for BackWPup - WordPress Backup & Restore Plugin
Q3 20253.6
Q4 20253.9
Q1 20264.3
Q2 20265.0
Q3 20265.0
Q4 20263.0

Average rating fell from 3.6 to 3.0 between Q3 2025 and Q4 2026.

Rating distribution
5 star918
4 star55
3 star28
2 star27
1 star295
Latest low reviews

Momentum

400,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for BackWPup - WordPress Backup & Restore Plugin
4 May 202613,583
11 May 202623,212
18 May 202624,618
25 May 2026162,899
1 Jun 2026178,174
8 Jun 2026172,798
15 Jun 202628,208
22 Jun 2026168,361
29 Jun 202630,171
6 Jul 2026172,034
13 Jul 202630,228
20 Jul 2026174,139
27 Jul 202636,111
3 Aug 202628,254
10 Aug 202618,142
17 Aug 202617,388
24 Aug 202613,885
31 Aug 202615,235
7 Sep 2026167,429
14 Sep 202631,742
21 Sep 202625,862
28 Sep 202621,675
5 Oct 2026178,030
12 Oct 2026167,990
19 Oct 202668,515
26 Oct 202635,167
2 Nov 20264,660

Weekly downloads over the last 4 weeks are 7% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

BlogVault Backup & StagingScore 91 · 80,000+Jetpack VaultPress BackupScore 91 · 20,000+Jetpack VaultPressScore 91 · 10,000+Backuply - Backup, Restore, Migrate and CloneScore 90 · 600,000+Royal WordPress Backup, Restore & Migration Plugin - Backup WordPress Sites SafelyScore 90 · 30,000+

Facts

Version5.7.8
AuthorWP Media
Added5 Jul 2009
Last updated14 Oct 2026
Active installs400,000+
Requires WordPress5.3
Tested up to7.1.4
Requires PHP7.4
CategorySecurity & Privacy > Backup & Restore
Tagsbackup, restore, cloud backup, database backup, wordpress backup

Other plugins by this author: Imagify Image Optimization: Optimize Images | Compress & Convert to WebP/AVIF, Search & Replace, Adminimize, LazyLoad Plugin - Lazy Load Images, Videos, and Iframes, Heartbeat Control, Increase Maximum Upload File Size, RocketCDN - WordPress CDN Plugin

Questions

Is BackWPup - WordPress Backup & Restore Plugin still maintained?

BackWPup - WordPress Backup & Restore Plugin was last updated on 14 Oct 2026. Its Canary status is Healthy.

Is BackWPup - WordPress Backup & Restore Plugin safe?

BackWPup - WordPress Backup & Restore Plugin has no open unpatched vulnerabilities on record. 8 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns BackWPup - WordPress Backup & Restore Plugin?

The wordpress.org author is WP Media. Recent committers: backwpup, wp_media, cocreation, nullbyte, darioinpsyde. We have recorded no ownership change.

What can I use instead of BackWPup - WordPress Backup & Restore Plugin?

Plugins in the same category with a higher Canary Score: BlogVault Backup & Staging, Jetpack VaultPress Backup, Jetpack VaultPress, Backuply - Backup, Restore, Migrate and Clone, Royal WordPress Backup, Restore & Migration Plugin - Backup WordPress Sites Safely.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue