WP BackItUp Community Edition
Avoid: WP BackItUp Community Edition is closed on wordpress.org and no longer gets updates.
Capped at 10 because the plugin is closed.
| Ownership | 100 |
|---|---|
| Maintenance | 10 |
| Security | 30 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 9 Sep 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.23 Sep 2026Evidence
- CriticalSEC-1Vulnerability published 9 Sep 2026 with no patched version yet. Disable or replace the plugin until a fix is released.9 Sep 2026Evidence
- CriticalCLS-1Closed on wordpress.org on 20 Aug 2026, reason: security issue. Replace this plugin. It no longer receives updates from wordpress.org.20 Aug 2026Evidence
- CriticalSEC-2Vulnerability published 21 Jan 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.4 Feb 2026Evidence
- CriticalSEC-1Vulnerability published 21 Jan 2026 with no patched version yet. Disable or replace the plugin until a fix is released.21 Jan 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
Commit history is collected for plugins with 1,000+ installs or on a watchlist. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- unknown
- Releases, 24 months
- 0
- Tested up to
- unknown vs 7.1
- Requires PHP
- not stated supported 8.2+
Release history builds as we see new versions.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 9 Sep 2026 | WP BackItUp Community Edition <= 2.1.0 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'backup_file' Parameter | 4.9 | <= 2.1.0 | No fix | n/a |
| 21 Jan 2026 | BackItUp <= 2.1.0 - Missing Authorization | 5.3 | <= 2.1.0 | No fix | n/a |
| 12 Aug 2024 | Backup and Restore WordPress <= 1.50 - Missing Authorization | 4.3 | <= 1.50 | 2.0.0 | n/a |
| 12 Aug 2024 | Backup and Restore WordPress <= 1.50 - Missing Authorization | 5.3 | <= 1.50 | 2.0.0 | n/a |
| 12 Aug 2024 | Backup and Restore Wordpress <= 1.50 - Cross-Site Request Forgery to Backup Trigger | 6.5 | <= 1.50 | 2.0.0 | n/a |
| 5 Mar 2024 | Backup and Restore WordPress WordPress <= 1.45 - Unauthenticated Information Exposure via Log Files | 5.3 | <= 1.45 | 1.50 | n/a |
| 4 Dec 2014 | Backup and Restore WordPress – Backup Plugin <= 1.9 - Authorization Bypass | 6.5 | <= 1.9 | 1.9.1 | n/a |
| 16 Jul 2014 | Backup and Restore WordPress – Backup Plugin <= 1.9 - Sensitive Information Disclosure | 7.5 | <= 1.9 | 1.9.1 | n/a |
Source: Wordfence Intelligence.
Reputation
No ratings yet.
Momentum
unknown active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | not stated |
|---|---|
| Author | not stated |
| Added | not stated |
| Last updated | not stated |
| Active installs | unknown |
| Requires WordPress | not stated |
| Tested up to | not stated |
| Requires PHP | not stated |
| Category | Site Administration & Utilities > Site Migration & Cloning |
| Tags | not stated |
Questions
Is WP BackItUp Community Edition still maintained?
No. WP BackItUp Community Edition was closed on wordpress.org on 20 Aug 2026 (security issue) and gets no updates there.
Is WP BackItUp Community Edition safe?
WP BackItUp Community Edition has 2 published vulnerabilities with no patched version. Its Canary status is Avoid.
Who owns WP BackItUp Community Edition?
The wordpress.org author is not listed. We have recorded no ownership change.
What can I use instead of WP BackItUp Community Edition?
Plugins in the same category with a higher Canary Score: Simple Custom Post Order, Migrate Guru - Site Migration & Cloning, WP-DBManager, WP Reset, WP Rollback - Rollback Plugins and Themes.