CYAN Backup

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 57% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

1. ★★★★★ mistermsk

   5.8y ago

   Full backup of SQL and files with a way of excluding directories. Able to schedule out and send to another servers or run the backup manually and download directly. Also, able to change from zip to tar.gz, etc… No fluff. Does what it says. Thank you!

   Read on wp.org ↗
2. ★★★★★ hectorluis

   6.0y ago

   I just installed, tried and doesn’t work

   Read on wp.org ↗
3. ★★★★★ Toxic

   9.3y ago

   This plugin has some excellent options (SFTP protocol, schedule, backup in single archive file, etc.) but one doesn’t have restore option also.

   Read on wp.org ↗
4. ★★★★★ deetmo

   10.7y ago

   Very nice plugin with great support! Simple and powerful. Only one free backup plugin with SFTP support.

   Read on wp.org ↗
5. ★★★★★ ShanePoad

   11.4y ago

   Installed without a hitch, ran the backup fast, sent the email notification and log. Seemed to be just what I was looking for, simple to use, setup, has scheduling and off site abilities. But after I ran it, I found no way to restore the backup. After having my WP site crashed by an auto-update of WP, I wanted a backup system so I could undo bad things that happen to the site. What is the point of a backup if there is no RESTORE???

   Read on wp.org ↗
6. ★★★★★ jsnowbusiness

   11.6y ago

   I’ve used almost all the free versions of the major backup plugins, and CYAN Backup is by far my favorite of all of them! The interface/settings are simple and clean, and most importantly every feature stated in the plugin’s description works. I hit a snag during setup (which turned out to be my sftp server’s setup, not the plugin) and the plugin author was very helpful in getting things going. To be honest, I really couldn’t ask for more, especially for free!

   Read on wp.org ↗
7. ★★★★★ gongl

   11.6y ago

   perfect for my remote backup!

   Read on wp.org ↗
8. ★★★★★ clart

   12.4y ago

   I had problems getting this working which turned out to be my hosting service and not the plugin. My php memory was found to be inadequate to properly run the WordPress site itself, never mind the plugin. It seems you need at least 32Mb for WordPress to work properly, I would advise 64Mb to avoid any issues. The author was always there to help and very quick to respond to every problem reported. I have tried other backups and found that CYAN backup is the most reliable and easiest to use. Now I have the scheduler setup, it automatically and faithfully backs up every day and prunes the files itself. Excellent work !

   Read on wp.org ↗

4 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.5 CYAN Backup <= 2.5.4 - Authenticated (Admin+) Arbitrary File Deletion ↗
   2025-11-07 CVE-2025-12092 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 2.5.4 Patched in 2.5.5
2. Medium · 4.4 CYAN Backup <= 2.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2025-03-03 CVE-2024-9662 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.5.2 Patched in 2.5.3
3. Medium · 4.4 CYAN Backup <= 2.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2025-03-03 CVE-2024-9663 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.5.2 Patched in 2.5.3
4. Medium · 4.9 CYAN Backup <= 2.5.3 - Authenticated (Admin+) Arbitrary File Download ↗
   2024-11-11 CVE-2024-52390 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 2.5.3 Patched in 2.5.4

Automated install-time checks, tested on PHP 8.1.12 · WP 6.8.3

Translated into 126 languages, 0 at 90% or more

Plus 102 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-11-12 400+ → 300+ down after 341 days in tier
2. 2024-12-06 500+ → 400+ down after 239 days in tier
3. 2024-04-11 600+ → 500+ down after 1 days in tier
4. 2024-04-10 500+ → 600+ up after 2 days in tier
5. 2024-04-08 600+ → 500+ down after 2 days in tier
6. 2024-04-06 500+ → 600+ up after 1 days in tier
7. 2024-04-05 600+ → 500+ down after 256 days in tier
8. 2023-07-24 700+ → 600+ down after 140 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• D DBC Backup 2 100+ installs · 3.6★ · 2 shared tags D
• X XM-Backup 50+ installs · 3.6★ · 2 shared tags D
• atec Backup 40+ installs · 4.1★ · 2 shared tags B
• F FTP to Zip 30+ installs · 4.0★ · 2 shared tags D
• Bulk Deployer 10+ installs · 3.6★ · 2 shared tags B
• All-in-One WP Migration and Backup 5M+ installs · 4.5★ · 1 shared tag A

Embed this report card

Drop a live Pulse card for CYAN Backup into a readme, a review or a deck. It updates itself.

CYAN Backup: 300+ active installs, 4.1★ (11 reviews). Plugin Pulse (WP Mayor), as of 2026-08-30. https://plugins.wpmayor.com/plugin/cyan-backup