Skip to content
PluginCanary

WPvivid

WPvivid - Backup, Migration & Staging
by wpvividplugins · 900,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 30 Oct 2026, 32 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for WPvivid
Ownership100
Maintenance100
Security60
Support86
Reputation85

How the score works

Quick answers

Is WPvivid still maintained?
Yes. Last release 30 Oct 2026, 32 releases in the last 24 months. 30 Oct 2026 · wordpress.org
Who owns WPvivid, and has it changed hands?
No change recorded. Main committer wpvivid since Jan 2019. 4 Nov 2026 · SVN log
Was WPvivid removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is WPvivid safe?
33 known vulnerabilities, all fixed (latest in 0.9.133). Not on the exploited list. 2 Sep 2026 · Wordfence Intelligence
Is the latest WPvivid update safe to install?
No ownership change before 0.9.139. No one-star spike after it. 30 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master3 Jan 2019 to 3 Jan 2019, 1 commits
wpvivid4 Jan 2019 to 30 Oct 2026, 351 commits

2 committers recorded. No ownership change since 2019.

Maintenance

Last release
5 days ago
Releases, 24 months
32
Tested up to
7.1 current
Requires PHP
5.6 supported 8.2+
Releases per quarter
Releases per quarter for WPvivid
Q1 20245
Q2 20243
Q3 20244
Q4 20245
Q1 20252
Q2 20253
Q3 20253
Q4 20253
Q1 20263
Q2 20264
Q3 20267
Q4 20263

Last release 30 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (30 reviews). Lifetime: 4.9.

Average rating stayed at 5.0 between Q3 2026 and Q4 2026.

Rating distribution
5 star1509
4 star20
3 star12
2 star4
1 star26

Security record

13 vulnerabilities in 24 months (33 on record), all patched (latest fixed in 0.9.133).

Show 33 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
2 Sep 2026WPvivid - Backup, Migration & Staging < 0.9.133 - Authenticated (Administrator+) SQL Injection4.9< 0.9.1330.9.133Patched before disclosure
2 Sep 2026WPvivid - Backup, Migration & Staging < 0.9.134 - Authenticated (Administrator+) Arbitrary File Deletion6.5< 0.9.1340.9.134Patched before disclosure
2 Sep 2026WPvivid - Backup, Migration & Staging < 0.9.134 - Authenticated (Administrator+) Arbitrary File Upload7.2< 0.9.1340.9.134Patched before disclosure
30 Aug 2026WPvivid - Backup, Migration & Staging < 0.9.133 - Authenticated (Administrator+) Remote Code Execution7.2< 0.9.1330.9.133Patched before disclosure
20 Aug 2026WPvivid - Backup, Migration & Staging < 0.9.131 - Unauthenticated Path Traversal7.5< 0.9.1310.9.131Patched before disclosure
31 Jul 2026WPvivid <= 0.9.131 - Authenticated (Administrator+) SQL Injection via 'export_data' Parameter4.9<= 0.9.1310.9.132Patched before disclosure
5 Jun 2026Migration, Backup, Staging - WPvivid Backup & Migration <= 0.9.128 - Authenticated (Admin+) Arbitrary Directory Deletion3.8<= 0.9.1280.9.129Patched before disclosure
10 Feb 2026Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload9.8<= 0.9.1230.9.124Patched before disclosure
20 Dec 2025Migration, Backup, Staging - WPvivid Backup & Migration <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory Creation2.7<= 0.9.1200.9.121Patched before disclosure
3 Jul 2025Migration, Backup, Staging - WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload7.2<= 0.9.1160.9.117Patched before disclosure
21 Feb 2025Migration, Backup, Staging - WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file7.2<= 0.9.1120.9.113Patched before disclosure
3 Jan 2025WPvivid Backup and Migration <= 0.9.106 - Missing Authorization5.3<= 0.9.1060.9.107Patched before disclosure
13 Nov 2024Migration, Backup, Staging - WPvivid <= 0.9.107 - Unauthenticated PHP Object Injection8.8<= 0.9.1070.9.108Patched before disclosure
11 Sep 2024Migration, Backup, Staging - WPvivid <= 0.9.105 - Sensitive Information Exposure7.5<= 0.9.1050.9.106Patched before disclosure
11 Apr 2024WPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization7.2<= 0.9.990.9.100Patched before disclosure
28 Feb 2024WPvivid Backup and Migration <= 0.9.68 - Unauthenticated SQL Injection9.80.9.680.9.69Patched before disclosure
28 Feb 2024WPvivid Backup and Migration <= 0.9.68 - Missing Authorization6.5<= 0.9.680.9.69Patched before disclosure
19 Jan 2024WPvivid <= 0.9.94 - Missing Authorization4.3<= 0.9.940.9.95Patched before disclosure
13 Oct 2023Migration, Backup, Staging - WPvivid <= 0.9.91 - Google Drive Client Secret Exposure8<= 0.9.910.9.92Patched before disclosure
22 Sep 2023Migration, Backup, Staging - WPvivid <= 0.9.89 - Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal8.70.9.890.9.90Patched before disclosure
22 Sep 2023Migration, Backup, Staging - WPvivid <= 0.9.89 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 0.9.890.9.90Patched before disclosure
22 Sep 2023Migration, Backup, Staging - WPvivid <= 0.9.89 - Authenticated Stored Cross-Site Scripting4.4<= 0.9.890.9.90Patched before disclosure
12 Sep 2023WPvivid Backup Plugin <= 0.9.90 - Missing Authorization via 'start_staging' and 'get_staging_progress'8.3< 0.9.910.9.91Patched before disclosure
29 Aug 2022WPvivid Backup 0.9.76 - Authenticated (Administrator+) Arbitrary File Deletion6.50.9.760.9.77Patched before disclosure
22 Aug 2022Migration, Backup, Staging - WPvivid <= 0.9.75 - Authenticated (Administrator+) Path Traversal6.5<= 0.9.750.9.76Patched before disclosure

Changelog mentions of security fixes: 0.9.129 (vulnerability); 0.9.131 (security, vulnerability); 0.9.132 (vulnerability); 0.9.133 (vulnerability); 0.9.134 (vulnerability).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

86% of 7 support threads resolved in the last 2 months.

Momentum

900,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WPvivid
4 May 202617,796
11 May 2026249,712
18 May 202698,185
25 May 2026258,444
1 Jun 2026267,112
8 Jun 202663,545
15 Jun 202648,437
22 Jun 202641,061
29 Jun 202638,191
6 Jul 2026248,114
13 Jul 202689,568
20 Jul 2026248,062
27 Jul 2026280,885
3 Aug 2026105,856
10 Aug 202649,971
17 Aug 202643,877
24 Aug 2026254,209
31 Aug 2026296,207
7 Sep 2026264,726
14 Sep 202689,926
21 Sep 202662,171
28 Sep 2026274,317
5 Oct 202681,046
12 Oct 202646,310
19 Oct 202659,527
26 Oct 2026244,421
2 Nov 202624,573

Weekly downloads over the last 4 weeks are 34% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Jetpack VaultPress BackupScore 100 · 20,000+Jetpack VaultPressScore 100 · 10,000+Backup, Restore and Migrate your sitesScore 96 · 10,000+WPvivid Backup for MainWPScore 95 · 10,000+BlogVault Backup & StagingScore 94 · 80,000+

Facts

Version0.9.139
Authorwpvividplugins
Added4 Jan 2019
Last updated30 Oct 2026
Active installs900,000+
Requires WordPress4.5
Tested up to7.1.4
Requires PHP5.6
CategorySecurity & Privacy > Backup & Restore
Tagsclone, backup, migrate, staging, duplicate

Other plugins by this author: WPvivid Backup for MainWP, Compress, Resize & Lazy Load Images - WPvivid Image Optimization, Database Snapshots - WPvivid

Questions

Is WPvivid still maintained?

Yes. Last release 30 Oct 2026, 32 releases in the last 24 months.

Who owns WPvivid, and has it changed hands?

No change recorded. Main committer wpvivid since Jan 2019.

Was WPvivid removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is WPvivid safe?

33 known vulnerabilities, all fixed (latest in 0.9.133). Not on the exploited list.

Is the latest WPvivid update safe to install?

No ownership change before 0.9.139. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue