Backup, Restore and Migrate your sites with XCloner

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 46% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ john1ham

   1.0y ago

   Thanks for making the plugin available. Works well on a RPi5 server with WordPress.

   Read on wp.org ↗
2. ★★★★★ volkerk

   1.3y ago

   It was a great backup tool the the ability to store backups in remote cloud storages. Since May, 31 2024 there is nothing but a syntax error when trying to backup to a remote WebDAV location. No reply to reports on GitHub and the WordPress support forum. So it has become worthless. This topic was modified 1 year, 2 months ago by volkerk.

   Read on wp.org ↗
3. ★★★★★ arnoldoeloy

   2.3y ago

   Excelente!, probé con otros plugins y se colgaban con la configuración que tiene mi servidor. Este fue el único que hizo el trabajo. Interfaz sencilla y profesional a la vez. 5 estrellas

   Read on wp.org ↗
4. ★★★★★ maxim23

   2.8y ago

   <font _mstmutation=”1″ _msttexthash=”94822″ _msthash=”387″>Всё ок</font> <font _mstmutation=”1″></font>

   Read on wp.org ↗
5. ★★★★★ miguelsdp

   3.4y ago

   makes the job precise and comfortable

   Read on wp.org ↗
6. ★★★★★ Marty

   3.9y ago

   I appreciate this is possibly the only free plugin that connects to some cloud storage providers like Backblaze. Unfortunately the plugin is a bit too buggy to rely on currently. The devs seem relatively responsive to support threads, so here’s hoping it will improve going forward.

   Read on wp.org ↗
7. ★★★★★ novakpeter

   4.2y ago

   It helps me to upload backups to Onedrive in one click. Please developers, do not give up, this plugin is very good!

   Read on wp.org ↗
8. ★★★★★ beedooze

   4.6y ago

   It was simply and faster, like this plugin This topic was modified 4 years, 6 months ago by beedooze. Reason: best

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 4.8.7 Restrict OneDrive auth token access to users with manage_options capability Improve output escaping for security compliance Add ABSPATH check to prevent direct access to plugin files Remove obsolete assets Add translatio 4.8.7

17 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 Backup, Restore and Migrate your sites with XCloner <= 4.8.6 - Authenticated (Subscriber+) Information Exposure ↗
   2026-06-03 CVE-2026-48965 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.8.6 Patched in 4.8.7
2. Medium · 4.3 Backup, Restore and Migrate your sites with XCloner <= 4.8.2 - Cross-Site Request Forgery in Xcloner_Remote_Storage:save() ↗
   2025-12-04 CVE-2025-11759 Cross-Site Request Forgery (CSRF) Affects <= 4.8.2 Patched in 4.8.3
3. Medium · 5.3 XCloner <= 4.7.3 - Unauthenticated Full Path Disclosure ↗
   2024-07-15 CVE-2024-6559 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.7.3 Patched in 4.7.4
4. Critical · 9.8 Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 4.2.16 - Unauthenticated Plugin Settings Reset ↗
   2022-06-06 CVE-2022-0444 Missing Authorization Affects <= 4.2.16 Patched in 4.3.6
5. High · 8.8 Backup, Restore and Migrate WordPress Sites With the XCloner Plugin 4.2.1 - 4.2.12 - Unprotected AJAX Actions ↗
   2020-08-18 CVE-2020-35948 Missing Authorization Affects 4.2.1 - 4.2.12 Patched in 4.2.153
6. Critical · 9.8 Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 4.2.152 - Cross-Site Request Forgery ↗
   2020-08-18 CVE-2020-35950 Cross-Site Request Forgery (CSRF) Affects < 4.2.153 Patched in 4.2.153
7. Medium · 4.3 Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.4 - Path Traversal to Sensitive Information Disclosure ↗
   2016-12-31 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 3.1.4 Patched in 3.1.5
8. Critical · 9.8 Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.2 - Remote Code Execution ↗
   2015-05-10 CVE-2015-4338 Improper Control of Generation of Code ('Code Injection') Affects < 3.1.3 Patched in 3.1.3
9. High · 8.8 Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.2 - Remote Command Execution ↗
   2015-05-10 CVE-2015-4336 Improper Neutralization of Special Elements used in a Command ('Command Injection') Affects <= 3.1.2 Patched in 3.1.3
10. Medium · 6.1 Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.2 - Cross-Site Scripting ↗
    2015-05-10 CVE-2015-4337 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.2 Patched in 3.1.3
11. High · 7.5 Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Sensitive Information Disclosure ↗
    2014-10-17 CVE-2014-8604 Exposure of Sensitive Information to an Unauthorized Actor Affects < 3.1.2 Patched in 3.1.2
12. High · 7.5 Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Improper Access Control to Information Disclosure ↗
    2014-10-17 CVE-2014-8605 Improper Access Control Affects <= 3.1.1 Patched in 3.1.2
13. Medium · 4.9 Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Directory Traversal ↗
    2014-10-17 CVE-2014-8606 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects < 3.1.2 Patched in 3.1.2
14. High · 7.2 Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Remote Code Execution ↗
    2014-10-17 CVE-2014-8603 Improper Control of Generation of Code ('Code Injection') Affects < 3.1.2 Patched in 3.1.2
15. High · 7.2 Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Sensitive Information Disclosure ↗
    2014-10-17 CVE-2014-8607 Exposure of Sensitive Information to an Unauthorized Actor Affects < 3.1.2 Patched in 3.1.2
16. Critical · 9.6 Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.0 - Multiple Cross-Site Request Forgery ↗
    2014-04-09 CVE-2014-2579 Cross-Site Request Forgery (CSRF) Affects < 3.1.1 Patched in 3.1.1
17. Medium · 5.4 Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.0 - Cross-Site Request Forgery ↗
    2014-04-02 CVE-2014-2340 Cross-Site Request Forgery (CSRF) Affects < 3.1.1 Patched in 3.1.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 9 languages, 4 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2023-09-05 20K+ → 10K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• UpdraftPlus: WP Backup & Migration Plugin 3M+ installs · 4.8★ · 4 shared tags A
• Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More 1M+ installs · 4.9★ · 4 shared tags A
• Backuply – Backup, Restore, Migrate and Clone 600K+ installs · 4.5★ · 4 shared tags A
• BackWPup – WordPress Backup & Restore Plugin 400K+ installs · 4.0★ · 4 shared tags A
• Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid 50K+ installs · 4.8★ · 4 shared tags A
• WP Database Backup – Unlimited Database & Files Backup by Backup for WP 30K+ installs · 4.4★ · 4 shared tags A

Embed this report card

Drop a live Pulse card for Backup, Restore and Migrate your sites with XCloner into a readme, a review or a deck. It updates itself.

Backup, Restore and Migrate your sites with XCloner: 10K+ active installs, 4.2★ (129 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/xcloner-backup-and-restore