Clone

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 65% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ khairyfarhan

   1.5y ago

   I used this plugin last week on my website and it works great! Just need to be a bit patient as it will take a significant amount of time.

   Read on wp.org ↗
2. ★★★★★ mediplexnorderney

   2.4y ago

   This plugin is worthless. Only with payment you can use. I did make a Backup because I was a believer. Now I need this Backup and noting works. Only error Messages. I did loose my website, because I was a believer. Shit plugin!! Be CAREFUL.

   Read on wp.org ↗
3. ★★★★★ Eliyahna

   3.0y ago

   Fast. Love it. Thank you

   Read on wp.org ↗
4. ★★★★★ Mark Andrew Elvidge

   3.1y ago

   Never got to test it out. Quickly got fed up of seeing banner ad in admin panel. Even after clicking ‘remind me later’ came back immediately after page refresh.

   Read on wp.org ↗
5. ★★★★★ nanaoss

   3.1y ago

   beyond excellent

   Read on wp.org ↗
6. ★★★★★ joshthemoore

   3.3y ago

   This plugin creates a massive ad which gets in the way of almost everything on your backend in WordPress. Do not use this unless you want half your screen taken up by advertisements.

   Read on wp.org ↗
7. ★★★★★ wireB

   3.7y ago

   Was confused when the plugin did not say, “Done” or “Finished,” How was that overlooked?

   Read on wp.org ↗
8. ★★★★★ sawebdesigner

   4.4y ago

   Have been using this plugin for years, the easiest and simplest clone plugin on wordpress to move smaller sites. Highly recommended.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.4.8 Tested with WordPress 6.8.3 Added new Backup Bliss banner module Integrated promotional banner for Backup Bliss plugin 2.4.8
2. — Version 2.4.7 Test with WordPress 6.7 Fixed a security issue 2.4.7
3. — Version 2.4.6 Tested with WordPress 6.6.1 Security fixes Fixed an issue with TryOut plugin installation 2.4.6
4. — Version 2.4.5 Tested with WordPress 6.6 Minor performance improvements Improvements for PHP 8 utilization 2.4.5
5. — Version 2.4.4 [NOTE] Upgraded “TryItOut” module to latest version [NOTE] Upgraded analyst module to latest version 2.4.4
6. — Version 2.4.3 Improved plugin security Tested with WordPress 6.4.2 Tested with PHP 8.3 2.4.3

8 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 8.8 Clone <= 2.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialized_replace' ↗
   2024-11-19 CVE-2024-10913 Deserialization of Untrusted Data Affects <= 2.4.6 Patched in 2.4.7
2. Medium · 4.3 Clone <= 2.4.5 - Missing Authorization ↗
   2024-08-16 CVE-2024-43298 Missing Authorization Affects <= 2.4.5 Patched in 2.4.6
3. Medium · 4.3 Inisev Analyst Module <= Various Versions - Missing Authorization ↗
   2024-04-10 CVE-2024-31435 Missing Authorization Affects <= 2.4.3 Patched in 2.4.4
4. Critical · 9.8 WP Clone <= 2.4.2 - Sensitive Information Exposure ↗
   2023-12-18 CVE-2023-6750 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.4.2 Patched in 2.4.3
5. Medium · 4.3 Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function ↗
   2023-07-27 CVE-2023-3977 Cross-Site Request Forgery (CSRF) Affects <= 2.3.7 Patched in 2.3.8
6. Medium · 4.3 Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function ↗
   2023-07-27 CVE-2023-0958 Missing Authorization Affects <= 2.3.7 Patched in 2.3.8
7. Medium · 4.3 Clone <= 2.3.7 - Cross-Site Request Forgery via wp_ajax_tifm_save_decision ↗
   2023-03-08 Cross-Site Request Forgery (CSRF) Affects <= 2.3.7 Patched in 2.3.8
8. Medium · 4.3 Clone <= 2.3.7 - Missing Authorization via wp_ajax_tifm_save_decision ↗
   2023-03-08 CVE-2023-25486 Missing Authorization Affects <= 2.3.7 Patched in 2.3.8

Automated install-time checks, tested on PHP 8.1.12 · WP 6.8.3

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-06-15 50K+ → 40K+ down after 220 days in tier
2. 2025-11-07 60K+ → 50K+ down after 230 days in tier
3. 2025-03-22 70K+ → 60K+ down after 223 days in tier
4. 2024-08-11 80K+ → 70K+ down after 169 days in tier
5. 2024-02-24 90K+ → 80K+ down after 110 days in tier
6. 2023-11-06 100K+ → 90K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• WPvivid — Backup, Migration & Staging 900K+ installs · 4.9★ · 4 shared tags A
• InstaWP Connect – 1-click WP Staging & Migration 40K+ installs · 4.2★ · 4 shared tags A
• 1-Click Backup & Migration 400+ installs · 4.4★ · 4 shared tags A
• Trinity Backup – Backup, Migrate, Restore, Clone & Schedule Backups 100+ installs · 3.6★ · 4 shared tags B
• All-in-One WP Migration and Backup 5M+ installs · 4.5★ · 3 shared tags A
• QNAP NAS Backup 2K+ installs · 3.6★ · 3 shared tags B

Embed this report card

Drop a live Pulse card for Clone into a readme, a review or a deck. It updates itself.

Clone: 40K+ active installs, 4.1★ (339 reviews). Plugin Pulse (WP Mayor), as of 2026-08-26. https://plugins.wpmayor.com/plugin/wp-clone-by-wp-academy