Plugin Pulse Beta
← Pulse

WPvivid — Backup, Migration & Staging

by wpvividplugins · Backup

Also makes 3 other plugins · 920.9K+ installs across the portfolio →

Try it live ↗ wp.org ↗

All-in-one WordPress backup, migration and staging plugin — schedule automatic backups, restore in one click, and migrate or clone sites safely.

Try it live opens a temporary test site in your browser, which can take about 20 seconds to load. Plugins that rely on outside services or a full server may not work completely there.

Health

A 90/100

no flags

Active installs

900K+

≈970K estimated

Momentum

-33%

downloads vs prior 30d

Biggest opportunity: Swap “duplicate” and “migrate” for “migration” and “site migration”. “duplicate” isn't earning its slot: it only gets you to #12. “migration” sits at #4 untagged, close enough for a declared tag to move it up. “migrate” isn't earning its slot: it only gets you to #11. “site migration” sits at #6 untagged, close enough for a declared tag to move it up. All five slots are taken, so one has to go.

See the detail → Get the free audit
How scoring works →
90 Health · A
Maintenance 100/100
Rating quality 98/100
Support 75/100
Security 75/100

90 health vs 75 average across 558 Backup plugins

900K+

Active installs

≈970K estimated

20.5M

Total downloads

since 2019 · 4.4% still active

4.9/5

Rating

1,568 reviews · +3.9/wk

-33%

448.9K

Downloads · 30d

category median +3%

Install conversion

How it's measured →

4.4%

of downloads still active

At least 900K of 20.5M lifetime downloads are still running, above its category: the median Backup plugin keeps 1.6%, across 286 plugins.

Downloads count every update, not just first installs, so older and more frequently released plugins read lower. Compare against other Backup plugins, not across the directory. wp.org reports active installs as the bottom of a band, so the real rate is this or higher.

This plugin shipped 18 releases in the last 12 months, and every existing install that updated counted as another download. wp.org publishes no split between first installs and updates, so we show the raw rate rather than guess at one.

Ratings · 1568 reviews

Read on wp.org ↗
5★
1506 4★
20 3★
12 2★
4 1★
26

Details

Version
0.9.139
Last updated
4d ago
Added
2019-01-04 · 7 yrs old
Requires WP
4.5
Tested up to
7.1.4
Requires PHP
5.6
Changelog ↗Support forum ↗Reviews ↗Advanced stats ↗

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

95 / 100

Excellent listing optimization

Most to gain: Support resolution

Update recency 100/100

Updated 4 days ago

WP compatibility 100/100

Tested up to WordPress 7.1.4, the current branch or newer

Rating quality 98/100

4.9★ over 1,568 reviews, weighted for review count to 4.9★

Listing tuning 100/100

5 of 5 tags set · short description in place

Support resolution 67/100

6 of 9 support threads resolved in the last 2 months

To rank higher: Mark more forum threads resolved — the resolved ratio feeds the ranking.

Get the full rank-higher report →

Daily downloads

Since 5 Oct 2022 · 1,490 days · wp.org + Plugin Pulse archive

-33% vs prior 30d
16.7K2 Nov 2026

30-day downloads

Rolling 30-day volume · peak 942.4K · peaks are release surges

445.4K2 Nov 2026

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

WPvivid · #69youClone · #824InstaWP Connect · #820All-in-One WP Migrat · #10

Rating trend

Star average over time · dips mark rough releases

4.92 Nov 2026

Health trend

Composite health score, snapshotted daily

902 Nov 2026

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

4952 Nov 2026

Release cadence

Actively maintained
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

18

releases in the last 12 months

4d ago

latest release · v0.9.139 · 30 Oct 2026

138

tagged releases on record

Recent releases

0.9.137 · 30 Oct 20260.9.139 · 30 Oct 20260.9.136 · 28 Sep 20260.9.135 · 10 Sep 20260.9.134 · 1 Sep 20260.9.133 · 27 Aug 20260.9.132 · 30 Jul 20260.9.131 · 24 Jul 20260.9.130 · 9 Jul 20260.9.129 · 24 Jun 20260.9.128 · 27 May 20260.9.127 · 14 May 20260.9.126 · 24 Apr 20260.9.125 · 25 Mar 2026

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin · 100% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v0.9 100%

Estimated active installs

The public count shows “900K+”. Our estimate pins where the real number sits.

tracked estimate
900K–1M ≈970K

Crossed into this band 9 months ago; a band this size takes about a year or more to cross, which places it about 72% of the way through.

Install history since 18 Nov 2021

900K2 Nov 2026

Recent reviews

All reviews on wp.org ↗
  1. ★★★★★ smkstoll
    4mo ago

    This plugin has been great. Set it up and forget about it.

    Read on wp.org ↗
  2. ★★★★★ rumples2022
    4mo ago

    Hugely useful – straightforward, reliable, sensible.

    Read on wp.org ↗
  3. ★★★★★ Moheimen
    4mo ago

    I used duplicator, all in one wp migration. They are good but for small sites under 1GB or less for their free version. This plugin handles 3GB site like a breeze, easy backup and migration on their free version. Thanks!

    Read on wp.org ↗
  4. ★★★★★ hasintha86
    4mo ago

    Excellent and easy to use plugin.

    Read on wp.org ↗
  5. ★★★★★ oupsjusttry
    4mo ago

    Thank you for this Plugin Easy and Great

    Read on wp.org ↗
  6. ★★★★★ aboai
    4mo ago

    I have using the WPvivid Backup Plugin primarily since I can remember, I have tried other and they all either seemed to give me issues one way or another. I cant think of one time WPvivid has let me down, I highly recommend it. Your use may vary, as not all plugins like to work with every other plugin available and I sometimes experiment with various plugins, so I highly recommend keeping WordPress and all plugins up to date, but also recommend backing up before you do.

    Read on wp.org ↗
  7. ★★★★★ joeathomas
    4mo ago

    I love the simplicity and functionality of WPVivid. I use it on all my clients’ sites for scheduled backups, migrations, and staging. Couldn’t be easier.

    Read on wp.org ↗
  8. ★★★★★ iamrizal
    4mo ago

    Very simple to setup. Works very well

    Read on wp.org ↗

Latest updates

via wp.org changelog

Recent releases and news for this plugin

  1. — Version 0.9.130 Fixed: A PHP deprecated warning could be logged after backups were successfully uploaded to Dropbox on PHP 8.2. 0.9.130
  2. — Version 0.9.129 Fixed a vulnerability in the plugin code. 0.9.129
  3. — Version 0.9.128 Added full compatibility and support for WordPress 7.0. Fixed: Creating a staging site with an independent database would fail if the live site’s database credentials contained single quotes. Fixed some UI styling issues 0.9.128
  4. — Version 0.9.127 Added upload and download chunk size options for Google Drive. Updated scheduled backup start time to a random time between 00:00:00 and 00:30:00 UTC. Fixed an issue with unused image scanning under PHP 8.5. 0.9.127
  5. — Version 0.9.126 Optimized the plugin code. 0.9.126
  6. — Version 0.9.125 Fixed: Backup uploads to remote storage could fail in certain server environments. Successfully tested with WordPress 6.9.4. 0.9.125

Security history

via Wordfence Intelligence

All 33 disclosed vulnerabilities are patched in the current version (0.9.139). Sites still on an older version should update.

  1. Patched Medium · 6.5 WPvivid — Backup, Migration & Staging < 0.9.134 - Authenticated (Administrator+) Arbitrary File Deletion ↗
    2026-09-02 CVE-2026-82194 Improper Limitation of a Pathname to a Restricted Directory Affects < 0.9.134 Patched in 0.9.134
  2. Patched High · 7.2 WPvivid — Backup, Migration & Staging < 0.9.134 - Authenticated (Administrator+) Arbitrary File Upload ↗
    2026-09-02 CVE-2026-82193 Unrestricted Upload of File with Dangerous Type Affects < 0.9.134 Patched in 0.9.134
  3. Patched Medium · 4.9 WPvivid — Backup, Migration & Staging < 0.9.133 - Authenticated (Administrator+) SQL Injection ↗
    2026-09-02 CVE-2026-82182 Improper Neutralization of Special Elements used in an SQL Command Affects < 0.9.133 Patched in 0.9.133
  4. Patched High · 7.2 WPvivid — Backup, Migration & Staging < 0.9.133 - Authenticated (Administrator+) Remote Code Execution ↗
    2026-08-30 CVE-2026-19722 Improper Control of Generation of Code Affects < 0.9.133 Patched in 0.9.133
  5. Patched High · 7.5 WPvivid — Backup, Migration & Staging < 0.9.131 - Unauthenticated Path Traversal ↗
    2026-08-20 CVE-2026-19725 Improper Limitation of a Pathname to a Restricted Directory Affects < 0.9.131 Patched in 0.9.131
  6. Patched Medium · 4.9 WPvivid <= 0.9.131 - Authenticated (Administrator+) SQL Injection via 'export_data' Parameter ↗
    2026-07-31 CVE-2026-17555 Improper Neutralization of Special Elements used in an SQL Command Affects <= 0.9.131 Patched in 0.9.132
  7. Patched Low · 3.8 Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.128 - Authenticated (Admin+) Arbitrary Directory Deletion ↗
    2026-06-05 CVE-2025-12656 External Control of File Name or Path Affects <= 0.9.128 Patched in 0.9.129
  8. Patched Critical · 9.8 Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload ↗
    2026-02-10 CVE-2026-1357 Unrestricted Upload of File with Dangerous Type Affects <= 0.9.123 Patched in 0.9.124
  9. Patched Low · 2.7 Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory Creation ↗
    2025-12-20 CVE-2025-12654 External Control of File Name or Path Affects <= 0.9.120 Patched in 0.9.121
  10. Patched High · 7.2 Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload ↗
    2025-07-03 CVE-2025-5961 Unrestricted Upload of File with Dangerous Type Affects <= 0.9.116 Patched in 0.9.117
  11. Patched High · 7.2 Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file ↗
    2025-02-21 CVE-2024-13869 Unrestricted Upload of File with Dangerous Type Affects <= 0.9.112 Patched in 0.9.113
  12. Patched Medium · 5.3 WPvivid Backup and Migration <= 0.9.106 - Missing Authorization ↗
    2025-01-03 CVE-2024-56273 Missing Authorization Affects <= 0.9.106 Patched in 0.9.107
  13. Patched High · 8.8 Migration, Backup, Staging – WPvivid <= 0.9.107 - Unauthenticated PHP Object Injection ↗
    2024-11-13 CVE-2024-10962 Deserialization of Untrusted Data Affects <= 0.9.107 Patched in 0.9.108
  14. Patched High · 7.5 Migration, Backup, Staging – WPvivid <= 0.9.105 - Sensitive Information Exposure ↗
    2024-09-11 CVE-2024-7315 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 0.9.105 Patched in 0.9.106
  15. Patched High · 7.2 WPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization ↗
    2024-04-11 CVE-2024-3054 Deserialization of Untrusted Data Affects <= 0.9.99 Patched in 0.9.100
  16. Patched Medium · 6.5 WPvivid Backup and Migration <= 0.9.68 - Missing Authorization ↗
    2024-02-28 CVE-2024-1982 Missing Authorization Affects <= 0.9.68 Patched in 0.9.69
  17. Patched Critical · 9.8 WPvivid Backup and Migration <= 0.9.68 - Unauthenticated SQL Injection ↗
    2024-02-28 CVE-2024-1981 Improper Neutralization of Special Elements used in an SQL Command Affects 0.9.68 Patched in 0.9.69
  18. Patched Medium · 4.3 WPvivid <= 0.9.94 - Missing Authorization ↗
    2024-01-19 CVE-2023-4637 Missing Authorization Affects <= 0.9.94 Patched in 0.9.95
  19. Patched High · 8.0 Migration, Backup, Staging – WPvivid <= 0.9.91 - Google Drive Client Secret Exposure ↗
    2023-10-13 CVE-2023-5576 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 0.9.91 Patched in 0.9.92
  20. Patched Medium · 4.4 Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated Stored Cross-Site Scripting ↗
    2023-09-22 CVE-2023-5120 Improper Neutralization of Input During Web Page Generation Affects <= 0.9.89 Patched in 0.9.90
  21. Patched High · 8.7 Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal ↗
    2023-09-22 CVE-2023-4274 Improper Limitation of a Pathname to a Restricted Directory Affects 0.9.89 Patched in 0.9.90
  22. Patched Medium · 4.4 Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2023-09-22 CVE-2023-5121 Improper Neutralization of Input During Web Page Generation Affects <= 0.9.89 Patched in 0.9.90
  23. Patched High · 8.3 WPvivid Backup Plugin <= 0.9.90 - Missing Authorization via 'start_staging' and 'get_staging_progress' ↗
    2023-09-12 CVE-2023-41243 Missing Authorization Affects < 0.9.91 Patched in 0.9.91
  24. Patched Medium · 6.5 WPvivid Backup 0.9.76 - Authenticated (Administrator+) Arbitrary File Deletion ↗
    2022-08-29 Improper Limitation of a Pathname to a Restricted Directory Affects 0.9.76 Patched in 0.9.77
  25. Patched Medium · 6.5 Migration, Backup, Staging – WPvivid <= 0.9.75 - Authenticated (Administrator+) Path Traversal ↗
    2022-08-22 CVE-2022-2863 Improper Limitation of a Pathname to a Restricted Directory Affects <= 0.9.75 Patched in 0.9.76
  26. Patched Medium · 6.0 Migration, Backup, Staging – WPvivid <= 0.9.75 - Authenticated (Admin+) Directory Traversal ↗
    2022-08-16 Relative Path Traversal Affects <= 0.9.75 Patched in 0.9.76
  27. Patched High · 7.2 Migration, Backup, Staging – WPvivid <= 0.9.74 - Authenticated (Admin+) PHAR Deserialization ↗
    2022-08-10 CVE-2022-2442 Deserialization of Untrusted Data Affects <= 0.9.74 Patched in 0.9.75
  28. Patched Medium · 4.9 Migration, Backup, Staging – WPvivid <= 0.9.70 - Authenticated Arbitrary File Read ↗
    2022-04-07 CVE-2022-27844 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 0.9.70 Patched in 0.9.71
  29. Patched Medium · 6.1 Migration, Backup, Staging – WPvivid <= 0.9.69 - Reflected Cross-Site Scripting via sub_page Parameter ↗
    2022-03-21 CVE-2022-0531 Improper Neutralization of Input During Web Page Generation Affects < 0.9.70 Patched in 0.9.70
  30. Patched Medium · 6.1 Migration, Backup, Staging – WPvivid <= 0.9.68 - Unauthenticated Stored Cross-Site Scripting ↗
    2022-01-31 CVE-2021-24994 Improper Neutralization of Input During Web Page Generation Affects < 0.9.69 Patched in 0.9.69
  31. Patched Medium · 6.1 Migration, Backup, Staging – WPvivid <= 0.9.55 - Reflected Cross-Site Scripting ↗
    2021-08-09 Improper Neutralization of Input During Web Page Generation Affects <= 0.9.55 Patched in 0.9.56
  32. Patched Medium · 4.9 Migration, Backup, Staging – WPvivid <= 0.9.35 - Sensitive Information Disclosure ↗
    2020-03-23 CVE-2020-36835 Exposure of Sensitive Information to an Unauthorized Actor Affects < 0.9.36 Patched in 0.9.36
  33. Patched High · 8.8 Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload ↗
    2020-03-13 CVE-2020-36842 Unrestricted Upload of File with Dangerous Type Affects <= 0.9.35 Patched in 0.9.36

Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.

CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.

Languages

via translate.wordpress.org

Translated into 50 languages, 30 at 90% or more

Danish 100%
Dutch 100%
Dutch (Belgium) 100%
Dutch (Formal) 100%
English (UK) 100%
Galician 100%
Portuguese (Brazil) 100%
Serbian 100%
Spanish (Spain) 100%
Czech 99%
Korean 99%
Spanish (Chile) 99%
Chinese (Taiwan) 98%
French (France) 98%
Polish 98%
Spanish (Argentina) 98%
Chinese (China) 97%
Croatian 97%
Russian 97%
Vietnamese 97%
Romanian 96%
Japanese 93%
Greek 92%
Arabic 91%

Plus 26 more locales with partial translations.

AI assistants

How it's measured →

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Premium

Share of voice

How often each assistant names WPvivid when asked about these topics, where it comes in the answer, and how that compares with its wp.org search position. Latest run 1 Nov 2026.

Assistants
ChatGPT, Claude
Topics tracked
Backup, Migration
Get early access to Premium →

Readme readiness

7 of 8 pass · checked 2 Nov 2026

Can an assistant quote this readme? Eight deterministic checks over the wp.org listing, no model involved.

  • ✓ Says what it does "All-in-one WordPress backup, migration and staging plugin — schedule automatic backups, restore in one clic..."
  • ✓ Has a FAQ 6 questions in the FAQ.
  • ✓ FAQ asks real questions 6 of 6 read like questions a user would type.
  • ! Names who it is for Never says who the plugin is for or what they use it for.
  • ✓ Names what it works with Mentions Multisite, Amazon S3, Dropbox, Google Drive and 1 more.
  • ✓ Headings and lists 12 headings and 2 lists.
  • ✓ Enough to quote 3,115 characters of description.
  • ✓ Tags match the text 4 of 5 tags appear in the text; "duplicate" does not.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2026-02-12 800K+ → 900K+ up after 166 days in tier
  2. 2025-08-30 700K+ → 800K+ up after 169 days in tier
  3. 2025-03-14 600K+ → 700K+ up after 128 days in tier
  4. 2024-11-06 500K+ → 600K+ up after 152 days in tier
  5. 2024-06-07 400K+ → 500K+ up after 164 days in tier
  6. 2023-12-26 300K+ → 400K+ up after 245 days in tier
  7. 2023-04-25 200K+ → 300K+ up after 306 days in tier
  8. 2022-06-23 100K+ → 200K+ up after 432 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for WPvivid — Backup, Migration & Staging into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/wpvivid-backuprestore" width="480" height="300" style="border:0" loading="lazy" title="WPvivid — Backup, Migration & Staging — Plugin Pulse"></iframe>
Preview card ↗

WPvivid — Backup, Migration & Staging: 900K+ active installs, 4.9★ (1,568 reviews). Plugin Pulse (WP Mayor), as of 2026-11-03. https://plugins.wpmayor.com/plugin/wpvivid-backuprestore

Spotted a number that looks wrong? Report a data issue and we'll check it against the source.