WebToffee WP Backup and Migration
Healthy: vulnerability published 28 Sep 2026, fixed in 1.6.1.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 90 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 28 Sep 2026, fixed in 1.6.1. Update to version 1.6.1 or later.28 Sep 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| webtoffee | 9 Jul 2018 to 24 Sep 2026, 69 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 41 days ago
- Releases, 24 months
- 9
- Tested up to
- 7.1 current
- Requires PHP
- 5.6 supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 2 |
| Q3 2024 | 2 |
| Q4 2024 | 2 |
| Q1 2025 | 0 |
| Q2 2025 | 1 |
| Q3 2025 | 2 |
| Q4 2025 | 1 |
| Q1 2026 | 1 |
| Q2 2026 | 0 |
| Q3 2026 | 2 |
| Q4 2026 | 0 |
Last release 24 Sep 2026. Tested with WordPress 7.1 (current).
Support
100% of 1 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 28 Sep 2026 | WebToffee WP Backup and Migration <= 1.6.0 - Missing Authorization | 5.3 | <= 1.6.0 | 1.6.1 | 0 |
| 13 Jan 2025 | WebToffee WP Backup and Migration <= 1.5.3 - Unauthenticated Sensitive Information Exposure | 5.3 | <= 1.5.3 | 1.5.4 | 0 |
| 22 Apr 2024 | WordPress Backup & Migration <= 1.4.8 - Missing Authorization to Directory Traversal | 4.3 | <= 1.4.8 | 1.4.9 | 0 |
| 5 Apr 2024 | WordPress Backup & Migration <= 1.4.7 - Unauthenticated Sensitive Information Exposure | 5.3 | <= 1.4.7 | 1.4.8 | 0 |
| 6 Nov 2023 | WordPress Backup & Migration <= 1.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting | 6.4 | <= 1.4.4 | 1.4.5 | 0 |
| 6 Nov 2023 | WordPress Backup & Migration <= 1.4.3 - Missing Authorization to Settings Update | 4.3 | <= 1.4.3 | 1.4.4 | 0 |
| 11 Oct 2023 | WordPress Backup & Migration <= 1.4.1 - Missing Authorization to Settings and Schedule Modification | 5.4 | <= 1.4.1 | 1.4.2 | 0 |
| 24 May 2023 | WordPress Backup & Migration <= 1.4.0 - Missing Authorization via wt_delete_schedule | 4.3 | <= 1.4.0 | 1.4.1 | 0 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.5 from 49 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 42 |
|---|---|
| 4 star | 0 |
| 3 star | 1 |
| 2 star | 1 |
| 1 star | 5 |
Momentum
5,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 192 |
|---|---|
| 11 May 2026 | 354 |
| 18 May 2026 | 523 |
| 25 May 2026 | 322 |
| 1 Jun 2026 | 281 |
| 8 Jun 2026 | 315 |
| 15 Jun 2026 | 262 |
| 22 Jun 2026 | 291 |
| 29 Jun 2026 | 257 |
| 6 Jul 2026 | 276 |
| 13 Jul 2026 | 219 |
| 20 Jul 2026 | 259 |
| 27 Jul 2026 | 264 |
| 3 Aug 2026 | 283 |
| 10 Aug 2026 | 247 |
| 17 Aug 2026 | 300 |
| 24 Aug 2026 | 2,492 |
| 31 Aug 2026 | 564 |
| 7 Sep 2026 | 500 |
| 14 Sep 2026 | 663 |
| 21 Sep 2026 | 2,590 |
| 28 Sep 2026 | 979 |
| 5 Oct 2026 | 788 |
| 12 Oct 2026 | 454 |
| 19 Oct 2026 | 588 |
| 26 Oct 2026 | 507 |
| 2 Nov 2026 | 68 |
Weekly downloads over the last 4 weeks are 26% below the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.6.1 |
|---|---|
| Author | WebToffee |
| Added | 18 Oct 2017 |
| Last updated | 24 Sep 2026 |
| Active installs | 5,000+ |
| Requires WordPress | 3.3 |
| Tested up to | 7.1.4 |
| Requires PHP | 5.6 |
| Category | Site Administration & Utilities > Site Migration & Cloning |
| Tags | cloud backup, database restore, wordpress backup, wordpress restore, wordpress migration |
Other plugins by this author: Product Import Export for WooCommerce - CSV Product Importer & Exporter, Order Export & Order Import for WooCommerce, WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels, Sequential Order Number for WooCommerce, Export and Import Users and Customers, Smart Coupons For WooCommerce Coupons, WebToffee eCommerce Marketing Automation - Email marketing, Popups, Email customizer, Related Products - Create Upsells, Cross-sells, and Product Recommendations for WooCommerce, mPDF add-on for RTL and Unicode Support, Comments Import & Export, WebToffee WooCommerce Product Feeds - Google Shopping, Pinterest, TikTok Ads, & More, Accessibility Tool Kit: WP Accessibility checker plugin for WCAG, Section 508, ADA, EAA Compliance
Questions
Is WebToffee WP Backup and Migration still maintained?
WebToffee WP Backup and Migration was last updated on 24 Sep 2026. Its Canary status is Healthy.
Is WebToffee WP Backup and Migration safe?
WebToffee WP Backup and Migration has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns WebToffee WP Backup and Migration?
The wordpress.org author is WebToffee. Recent committers: webtoffee, markhf, plugin-master. We have recorded no ownership change.
What can I use instead of WebToffee WP Backup and Migration?
Plugins in the same category with a higher Canary Score: BlogVault Backup & Staging, Jetpack VaultPress Backup, Jetpack VaultPress, Backuply - Backup, Restore, Migrate and Clone, Royal WordPress Backup, Restore & Migration Plugin - Backup WordPress Sites Safely.