WPvivid — Backup, Migration & Staging

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 100% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

Reviewers call WPvivid easy to set up and reliable for backups, migrations and staging, with a few noting solid support when something did go wrong.

1. ★★★★★ smkstoll

   1mo ago

   This plugin has been great. Set it up and forget about it.

   Read on wp.org ↗
2. ★★★★★ rumples2022

   1mo ago

   Hugely useful – straightforward, reliable, sensible.

   Read on wp.org ↗
3. ★★★★★ Moheimen

   2mo ago

   I used duplicator, all in one wp migration. They are good but for small sites under 1GB or less for their free version. This plugin handles 3GB site like a breeze, easy backup and migration on their free version. Thanks!

   Read on wp.org ↗
4. ★★★★★ hasintha86

   2mo ago

   Excellent and easy to use plugin.

   Read on wp.org ↗
5. ★★★★★ oupsjusttry

   2mo ago

   Thank you for this Plugin Easy and Great

   Read on wp.org ↗
6. ★★★★★ aboai

   2mo ago

   I have using the WPvivid Backup Plugin primarily since I can remember, I have tried other and they all either seemed to give me issues one way or another. I cant think of one time WPvivid has let me down, I highly recommend it. Your use may vary, as not all plugins like to work with every other plugin available and I sometimes experiment with various plugins, so I highly recommend keeping WordPress and all plugins up to date, but also recommend backing up before you do.

   Read on wp.org ↗
7. ★★★★★ joeathomas

   2mo ago

   I love the simplicity and functionality of WPVivid. I use it on all my clients’ sites for scheduled backups, migrations, and staging. Couldn’t be easier.

   Read on wp.org ↗
8. ★★★★★ iamrizal

   2mo ago

   Very simple to setup. Works very well

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 0.9.130 Fixed: A PHP deprecated warning could be logged after backups were successfully uploaded to Dropbox on PHP 8.2. 0.9.130
2. — Version 0.9.129 Fixed a vulnerability in the plugin code. 0.9.129
3. — Version 0.9.128 Added full compatibility and support for WordPress 7.0. Fixed: Creating a staging site with an independent database would fail if the live site’s database credentials contained single quotes. Fixed some UI styling issues 0.9.128
4. — Version 0.9.127 Added upload and download chunk size options for Google Drive. Updated scheduled backup start time to a random time between 00:00:00 and 00:30:00 UTC. Fixed an issue with unused image scanning under PHP 8.5. 0.9.127
5. — Version 0.9.126 Optimized the plugin code. 0.9.126
6. — Version 0.9.125 Fixed: Backup uploads to remote storage could fail in certain server environments. Successfully tested with WordPress 6.9.4. 0.9.125

29 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.5 WPvivid — Backup, Migration & Staging < 0.9.131 - Unauthenticated Path Traversal ↗
   2026-08-20 CVE-2026-19725 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects < 0.9.131 Patched in 0.9.131
2. Medium · 4.9 WPvivid <= 0.9.131 - Authenticated (Administrator+) SQL Injection via 'export_data' Parameter ↗
   2026-07-31 CVE-2026-17555 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 0.9.131 Patched in 0.9.132
3. Low · 3.8 Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.128 - Authenticated (Admin+) Arbitrary Directory Deletion ↗
   2026-06-05 CVE-2025-12656 External Control of File Name or Path Affects <= 0.9.128 Patched in 0.9.129
4. Critical · 9.8 Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload ↗
   2026-02-10 CVE-2026-1357 Unrestricted Upload of File with Dangerous Type Affects <= 0.9.123 Patched in 0.9.124
5. Low · 2.7 Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory Creation ↗
   2025-12-20 CVE-2025-12654 External Control of File Name or Path Affects <= 0.9.120 Patched in 0.9.121
6. High · 7.2 Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload ↗
   2025-07-03 CVE-2025-5961 Unrestricted Upload of File with Dangerous Type Affects <= 0.9.116 Patched in 0.9.117
7. High · 7.2 Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file ↗
   2025-02-21 CVE-2024-13869 Unrestricted Upload of File with Dangerous Type Affects <= 0.9.112 Patched in 0.9.113
8. Medium · 5.3 WPvivid Backup and Migration <= 0.9.106 - Missing Authorization ↗
   2025-01-03 CVE-2024-56273 Missing Authorization Affects <= 0.9.106 Patched in 0.9.107
9. High · 8.8 Migration, Backup, Staging – WPvivid <= 0.9.107 - Unauthenticated PHP Object Injection ↗
   2024-11-13 CVE-2024-10962 Deserialization of Untrusted Data Affects <= 0.9.107 Patched in 0.9.108
10. High · 7.5 Migration, Backup, Staging – WPvivid <= 0.9.105 - Sensitive Information Exposure ↗
    2024-09-11 CVE-2024-7315 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 0.9.105 Patched in 0.9.106
11. High · 7.2 WPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization ↗
    2024-04-11 CVE-2024-3054 Deserialization of Untrusted Data Affects <= 0.9.99 Patched in 0.9.100
12. Medium · 6.5 WPvivid Backup and Migration <= 0.9.68 - Missing Authorization ↗
    2024-02-28 CVE-2024-1982 Missing Authorization Affects <= 0.9.68 Patched in 0.9.69
13. Critical · 9.8 WPvivid Backup and Migration <= 0.9.68 - Unauthenticated SQL Injection ↗
    2024-02-28 CVE-2024-1981 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects 0.9.68 Patched in 0.9.69
14. Medium · 4.3 WPvivid <= 0.9.94 - Missing Authorization ↗
    2024-01-19 CVE-2023-4637 Missing Authorization Affects <= 0.9.94 Patched in 0.9.95
15. High · 8.0 Migration, Backup, Staging – WPvivid <= 0.9.91 - Google Drive Client Secret Exposure ↗
    2023-10-13 CVE-2023-5576 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 0.9.91 Patched in 0.9.92
16. Medium · 4.4 Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated Stored Cross-Site Scripting ↗
    2023-09-22 CVE-2023-5120 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 0.9.89 Patched in 0.9.90
17. High · 8.7 Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal ↗
    2023-09-22 CVE-2023-4274 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects 0.9.89 Patched in 0.9.90
18. Medium · 4.4 Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2023-09-22 CVE-2023-5121 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 0.9.89 Patched in 0.9.90
19. High · 8.3 WPvivid Backup Plugin <= 0.9.90 - Missing Authorization via 'start_staging' and 'get_staging_progress' ↗
    2023-09-12 CVE-2023-41243 Missing Authorization Affects < 0.9.91 Patched in 0.9.91
20. Medium · 6.5 WPvivid Backup 0.9.76 - Authenticated (Administrator+) Arbitrary File Deletion ↗
    2022-08-29 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects 0.9.76 Patched in 0.9.77
21. Medium · 6.5 Migration, Backup, Staging – WPvivid <= 0.9.75 - Authenticated (Administrator+) Path Traversal ↗
    2022-08-22 CVE-2022-2863 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 0.9.75 Patched in 0.9.76
22. Medium · 6.0 Migration, Backup, Staging – WPvivid <= 0.9.75 - Authenticated (Admin+) Directory Traversal ↗
    2022-08-16 Relative Path Traversal Affects <= 0.9.75 Patched in 0.9.76
23. High · 7.2 Migration, Backup, Staging – WPvivid <= 0.9.74 - Authenticated (Admin+) PHAR Deserialization ↗
    2022-08-10 CVE-2022-2442 Deserialization of Untrusted Data Affects <= 0.9.74 Patched in 0.9.75
24. Medium · 4.9 Migration, Backup, Staging – WPvivid <= 0.9.70 - Authenticated Arbitrary File Read ↗
    2022-04-07 CVE-2022-27844 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 0.9.70 Patched in 0.9.71
25. Medium · 6.1 Migration, Backup, Staging – WPvivid <= 0.9.69 - Reflected Cross-Site Scripting via sub_page Parameter ↗
    2022-03-21 CVE-2022-0531 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 0.9.70 Patched in 0.9.70
26. Medium · 6.1 Migration, Backup, Staging – WPvivid <= 0.9.68 - Unauthenticated Stored Cross-Site Scripting ↗
    2022-01-31 CVE-2021-24994 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 0.9.69 Patched in 0.9.69
27. Medium · 6.1 Migration, Backup, Staging – WPvivid <= 0.9.55 - Reflected Cross-Site Scripting ↗
    2021-08-09 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 0.9.55 Patched in 0.9.56
28. Medium · 4.9 Migration, Backup, Staging – WPvivid <= 0.9.35 - Sensitive Information Disclosure ↗
    2020-03-23 CVE-2020-36835 Exposure of Sensitive Information to an Unauthorized Actor Affects < 0.9.36 Patched in 0.9.36
29. High · 8.8 Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload ↗
    2020-03-13 CVE-2020-36842 Unrestricted Upload of File with Dangerous Type Affects <= 0.9.35 Patched in 0.9.36

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 50 languages, 30 at 90% or more

Plus 26 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-02-12 800K+ → 900K+ up after 166 days in tier
2. 2025-08-30 700K+ → 800K+ up after 169 days in tier
3. 2025-03-14 600K+ → 700K+ up after 128 days in tier
4. 2024-11-06 500K+ → 600K+ up after 152 days in tier
5. 2024-06-07 400K+ → 500K+ up after 164 days in tier
6. 2023-12-26 300K+ → 400K+ up after 245 days in tier
7. 2023-04-25 200K+ → 300K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Clone 40K+ installs · 4.1★ · 4 shared tags B
• InstaWP Connect – 1-click WP Staging & Migration 40K+ installs · 4.2★ · 4 shared tags A
• All-in-One WP Migration and Backup 5M+ installs · 4.5★ · 3 shared tags A
• Backup Migration 80K+ installs · 4.8★ · 3 shared tags A
• BlogVault Backup & Staging 80K+ installs · 4.5★ · 3 shared tags A
• Aruba Migration Tool 600+ installs · 3.7★ · 3 shared tags B

Embed this report card

Drop a live Pulse card for WPvivid — Backup, Migration & Staging into a readme, a review or a deck. It updates itself.

WPvivid — Backup, Migration & Staging: 900K+ active installs, 4.9★ (1,534 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/wpvivid-backuprestore