Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 72% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

Recent releases and news for this plugin

1. — Version 1.17.2 Release Date: Mar 11, 2026 * Security Update: Increased security for canceling a pending rollback. 1.17.2
2. — Version 1.17.1 Release Date: Apr 14, 2025 * Bug Fix: Fix _load_textdomain_just_in_time notices #624 1.17.1
3. — Version 1.17.0 Release Date: Mar 14, 2025 * New Feature: Direct Transfer feature added for live beta #611 * Security Update: Add Compression Level validation to settings #622 1.17.0
4. — Version 1.16.10 Release Date: Feb 26, 2025 * Bug Fix: Prevent old backlogged jobs from running due to a previous CRON bug. 1.16.10
5. — Version 1.16.9 Release Date: Feb 25, 2025 * Bug Fix: PHP Warning: Undefined array key “is_running” #614 * Bug Fix: Fix scheduled jobs not running, and add extra logging #612 * Security Update: Change from wp_remote_get to wp_safe_remot 1.16.9
6. — Version 1.16.8 Release Date: Jan 15, 2025 * Bug Fix: Schedule settings shows no options when no cron is available. #563 * Bug Fix: Update to Support Links #607 1.16.8

9 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid < 1.17.3 - Unauthenticated Information Exposure ↗
   2026-08-14 CVE-2026-16253 Exposure of Sensitive Information to an Unauthorized Actor Affects < 1.17.3 Patched in 1.17.3
2. Medium · 5.3 Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid <= 1.17.2 - Missing Authorization ↗
   2026-08-04 CVE-2026-66708 Missing Authorization Affects <= 1.17.2 Patched in 1.17.3
3. Medium · 5.3 Total Upkeep <= 1.17.1 - Missing Authorization to Unauthenticated Rollback Cancellation ↗
   2026-04-30 CVE-2026-3143 Missing Authorization Affects <= 1.17.1 Patched in 1.17.2
4. High · 7.2 Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid <= 1.16.10 - Authenticated (Admin+) Command Injection ↗
   2025-03-25 CVE-2025-2257 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Affects <= 1.16.10 Patched in 1.17.0
5. Medium · 4.9 Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid <= 1.16.8 - Authenticated (Administrator+) Server-Side Request Forgery ↗
   2025-02-26 CVE-2024-13907 Server-Side Request Forgery (SSRF) Affects <= 1.16.8 Patched in 1.16.9
6. High · 7.2 Total Upkeep <= 1.16.6 - Authenticated (Administrator+) Remote Code Execution via Backup Settings ↗
   2024-11-26 CVE-2024-9461 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Affects <= 1.16.6 Patched in 1.16.7
7. High · 7.5 Total Upkeep <= 1.15.8 - Improper Authorization to Unauthenticated Arbitrary File Download ↗
   2024-02-02 CVE-2024-24869 Improper Authorization Affects <= 1.15.8 Patched in 1.15.9
8. Medium · 4.3 Total Upkeep <= 1.14.13 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure ↗
   2022-02-24 CVE-2022-4932 Missing Authorization Affects <= 1.14.13 Patched in 1.14.14
9. High · 7.5 Total Upkeep by BoldGrid <= 1.14.9 - Unauthenticated Backup Download ↗
   2020-12-14 CVE-2020-36848 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.14.9 Patched in 1.14.10

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 3 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-03-19 60K+ → 50K+ down after 343 days in tier
2. 2025-04-10 70K+ → 60K+ down after 429 days in tier
3. 2024-02-06 80K+ → 70K+ down after 2 days in tier
4. 2024-02-04 70K+ → 80K+ up after 1 days in tier
5. 2024-02-03 80K+ → 70K+ down after 283 days in tier
6. 2023-04-26 90K+ → 80K+ down after 93 days in tier
7. 2023-01-23 80K+ → 90K+ up after 12 days in tier
8. 2023-01-11 90K+ → 80K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Backuply – Backup, Restore, Migrate and Clone 600K+ installs · 4.5★ · 5 shared tags A
• BackWPup – WordPress Backup & Restore Plugin 400K+ installs · 4.0★ · 5 shared tags A
• SafeSnap – Verified WordPress Backup & Restore 10+ installs · 3.6★ · 5 shared tags B
• UpdraftPlus: WP Backup & Migration Plugin 3M+ installs · 4.8★ · 4 shared tags A
• Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More 1M+ installs · 4.9★ · 4 shared tags A
• WP Database Backup – Unlimited Database & Files Backup by Backup for WP 30K+ installs · 4.4★ · 4 shared tags A

Embed this report card

Drop a live Pulse card for Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid into a readme, a review or a deck. It updates itself.

Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid: 50K+ active installs, 4.8★ (440 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/boldgrid-backup