BackWPup – WordPress Backup & Restore Plugin

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

1493 searches this plugin appeared in over the last 90 days, 20 listed. 1425 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

Share of active installs on each version of this plugin · 35% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 3 months ago and the previous band took 14 months to cross, so the real count is still just under 500K.

1. ★★★★★ Tom2708

   4mo ago

   I always received the error message “Run aborted because no PID given!” although the backups had been complete. Thanks to Saransh and the support team I could test the new version 5.74 of BackwpUp which solved the problem.

   Read on wp.org ↗
2. ★★★★★ tabasko

   5mo ago

   I am absolutely blown away by the quality of the support team at BackWPup. I ran into a complex backup issue on my site and they were incredibly fast, polite, and highly efficient in helping me resolve it.What makes this truly exceptional is that I am currently using the free version of the plugin. To be honest, I have paid for premium plugins in the past where the support wasn’t even half as good or responsive as this.A huge thank you to the team for proving that great customer care still exists, even for free users. If I ever need to upgrade to a premium backup solution, I will choose them without a single hesitation. 5 stars well deserved!

   Read on wp.org ↗
3. ★★★★★ sparkyparks

   5mo ago

   Was getting an error but I requested help and got it rather quickly. I was able to resolve the issue in short order. Thank you!

   Read on wp.org ↗
4. ★★★★★ Oleksandr

   6mo ago

   Great plugin with flexible settings. Thanks to the developers!

   Read on wp.org ↗
5. ★★★★★ aydenkenna

   8mo ago

   BackWPup – WordPress Backup & Restore Plugin is a decent plugin that handles basic backups quite well. The setup is simple, and the automatic backup feature is definitely useful. However, the backup process can sometimes be slow, and a few advanced options feel a bit confusing. Overall, it’s a solid choice for beginners, but there’s still room for improvement. This topic was modified 4 months ago by aydenkenna.

   Read on wp.org ↗
6. ★★★★★ nickar2

   8mo ago

   I saw a great, easy and powerful tool for WordPress users!

   Read on wp.org ↗
7. ★★★★★ rjj1

   10mo ago

   when I was having issues setting up this plugin, their support team was a great help and advised me on how to escalate the issue with my hosting provider. Thanks to their assistance, my hosting provider fixed the issue and the plugin is now working. Thanks, backWPup! Aside from that, it’s really easy to use, with a simple interface and settings that are easy to understand. The free version has all the functionality I need for a small website. I’m very happy with this plugin.

   Read on wp.org ↗
8. ★★★★★ pigsound

   10mo ago

   i have been using backwpup for many years and have always loved its easy handling. there were some quirks in the beginning after the relaunch but they seem to be mastered now. when i had some issues, support was always fast, friendly and constructive.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 5.7.5 Release date: July 21, 2026 Security fix: Resolved a Cross-Site Scripting (XSS) vulnerability on the Restore page. Fix: Fixed an incorrect backup aborted notice and a page freeze when using the Backup Now button. Fix: Fi 5.7.5
2. — Version 5.7.4 Release date: July 6, 2026 New feature: Added a security notice that detects stale restore files and allows them to be deleted with one click. Enhancement: Restore working directories are now automatically cleaned up aft 5.7.4
3. — Version 5.7.3 Release date: June 22, 2026 Enhancement: Added the backwpup_mcp_server_enabled filter to allow disabling MCP functionality. Fix: MCP backup history now reports correct file sizes across all storage destinations. Fix: Res 5.7.3
4. — Version 5.7.2 Release date: June 8, 2026 Fix: Resolved PHP namespace conflicts in bundled vendor libraries to prevent fatal errors caused by dependency collisions with other plugins. 5.7.2
5. — Version 5.7.0 Release date: June 8, 2026 New feature: Added MCP support, allowing AI assistants to manage backups, run jobs, monitor progress, cancel jobs, and access logs. 5.7.0
6. — Version 5.6.11 Release date: June 1, 2026 Fix: Addressed a Block Editor List View issue that caused some block names to appear blank. 5.6.11

All 16 disclosed vulnerabilities are patched in the current version (5.7.8). Sites still on an older version should update.

1. Patched Medium · 5.3 BackWPup – WordPress Backup & Restore Plugin < 5.7.7 - Unauthenticated Information Exposure ↗
   2026-10-08 CVE-2026-86826 Exposure of Sensitive Information to an Unauthorized Actor Affects < 5.7.7 Patched in 5.7.7
2. Patched Medium · 5.3 BackWPup – WordPress Backup & Restore Plugin 3.3 - 5.7.6 - Missing Authorization ↗
   2026-10-08 CVE-2026-86827 Missing Authorization Affects 3.3 - 5.7.6 Patched in 5.7.7
3. Patched Medium · 4.9 BackWPup – WordPress Backup & Restore Plugin < 5.7.7 - Authenticated (Administrator+) Path Traversal ↗
   2026-10-08 CVE-2026-86828 Improper Limitation of a Pathname to a Restricted Directory Affects < 5.7.7 Patched in 5.7.7
4. Patched Medium · 4.3 BackWPup – WordPress Backup & Restore Plugin 5.2.2 - 5.7.4 - Missing Authorization ↗
   2026-09-11 CVE-2026-86815 Missing Authorization Affects 5.2.2 - 5.7.4 Patched in 5.7.5
5. Patched High · 7.2 BackWPup <= 5.7.4 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-07-27 CVE-2026-65443 Improper Neutralization of Input During Web Page Generation Affects <= 5.7.4 Patched in 5.7.5
6. Patched High · 7.2 BackWPup <= 5.6.6 - Authenticated (Administrator+) Local File Inclusion via 'block_name' Parameter ↗
   2026-04-13 CVE-2026-6227 Improper Limitation of a Pathname to a Restricted Directory Affects <= 5.6.6 Patched in 5.6.7
7. Patched High · 7.2 BackWPup 5.0.0 - 5.6.2 - Authenticated (BackWPup Helper+) Privilege Escalation via Arbitrary Options Update ↗
   2026-02-18 CVE-2025-15041 Missing Authorization Affects 5.0.0 - 5.6.2 Patched in 5.6.3
8. Patched Medium · 5.3 BackWPup 5 - 5.5.0 - Missing Authorization to Sensitive Information Exposure ↗
   2025-10-24 CVE-2025-10579 Missing Authorization Affects 5 - 5.5.0 Patched in 5.5.1
9. Patched Medium · 6.8 BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal ↗
   2024-08-16 CVE-2023-5505 Improper Limitation of a Pathname to a Restricted Directory Affects <= 4.0.1 Patched in 4.0.2
10. Patched Low · 2.2 BackWPup <= 4.0.2 - Plaintext Storage of Backup Destination Password ↗
    2024-02-23 CVE-2023-5775 Plaintext Storage of a Password Affects <= 4.0.2 Patched in 4.0.3
11. Patched High · 7.5 BackWPup <= 4.0.3 - Sensitive Information Exposure ↗
    2023-12-18 CVE-2023-7164 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.0.3 Patched in 4.0.4
12. Patched High · 8.7 BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal ↗
    2023-11-22 CVE-2023-5504 Improper Limitation of a Pathname to a Restricted Directory Affects <= 4.0.1 Patched in 4.0.2
13. Patched High · 7.5 BackWPup <= 3.4.1 - Unauthenticated Backup Download ↗
    2017-09-08 CVE-2017-2551 Files or Directories Accessible to External Parties Affects < 3.4.2 Patched in 3.4.2
14. Patched Medium · 6.1 BackWPup < 3.0.13 - Cross-Site Scripting ↗
    2013-08-21 CVE-2013-4626 Improper Neutralization of Input During Web Page Generation Affects < 3.0.13 Patched in 3.0.13
15. Patched Critical · 9.8 BackWPup <= 1.7.1 - Remote File Inclusion ↗
    2011-03-28 CVE-2011-4342 Improper Control of Filename for Include/Require Statement in PHP Program Affects <= 1.7.1 Patched in 1.7.2
16. Patched High · 7.5 BackWPup – WordPress Backup Plugin < 1.4.1 - Directory Traversal ↗
    2011-03-02 CVE-2011-5208 Improper Limitation of a Pathname to a Restricted Directory Affects < 1.4.1 Patched in 1.4.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 60 languages, 6 at 90% or more

Plus 36 more locales with partial translations.

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-08-03 500K+ → 400K+ down after 429 days in tier
2. 2025-05-31 600K+ → 500K+ down after 636 days in tier
3. 2023-09-03 700K+ → 600K+ down after 975 days in tier
4. 2021-01-01 600K+ → 700K+ up after 1185 days in tier
5. 2017-10-04 500K+ → 600K+ up after 453 days in tier
6. 2016-07-08 400K+ → 500K+ up after 306 days in tier
7. 2015-09-06 300K+ → 400K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for BackWPup – WordPress Backup & Restore Plugin into a readme, a review or a deck. It updates itself.

BackWPup – WordPress Backup & Restore Plugin: 400K+ active installs, 4.0★ (1,323 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/backwpup