JetBackup – Backup, Restore & Migrate

JetBackup – Backup, Restore & Migrate has 12 disclosed vulnerabilities in the WordSec catalog, reported between 2016 and 2026; all 12 are fixed as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 3 high. 2026 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (25%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Missing Authorization.

Every one of the 12 issues recorded for JetBackup – Backup, Restore & Migrate has a vendor fix available, so running the current release closes all known holes.

9 independent researchers contributed these findings, most of them (3) reported by Chloe Chamberland. JetBackup – Backup, Restore & Migrate is installed on roughly 200,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.5/ 10
Patch Coverage100%
Open

0

Fixed

12

Get automatic notifications for all JetBackup – Backup, Restore & Migrate vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2023-7165

JetBackup <= 2.0.9.7 - Sensitive Information Exposure via Directory Listing

Read the full analysis

Vulnerability Records

12 records
2026-09-03 00:00CVE-2026-19453
6.3
Medium
Jakub HermanYes
2026-08-25 00:00CVE-2026-19454
4.9
Medium
Akshat ParikhYes
2026-04-16 15:21CVE-2026-4853
4.9
Medium
lucsobYes
2024-02-02 00:00CVE-2023-7165
9.8
Critical
Dmitrii IgnatyevYes
2022-10-27 00:00CVE-2022-34148
5.5
Medium
Muhammad DaffaYes
2021-02-18 00:00CVE-2021-24155
7.2
High
Nguyen Van KhanhYes
2020-07-30 00:00CVE-2020-36668
4.3
Medium
Chloe ChamberlandYes
2020-07-30 00:00CVE-2020-36667
5.4
Medium
Chloe ChamberlandYes
2020-07-16 00:00CVE-2020-36669
8.8
High
Chloe ChamberlandYes
2017-08-24 00:00CVE-2017-10837
6.1
Medium
Chris LiuYes
Showing 1–10 of 12 reports
JetBackup – Backup, Restore & Migrate banner
Latestv3.1.23.6

JetBackup – Backup, Restore & Migrate

JetBackup

Author

JetBackup

4.5(1,054)
90/100
Last Updated
2026-08-26 (18d ago)
Active Installs
200,000+
Downloads
4,744,770
Requires WP
6.0+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2012-05-12 (15y ago)

JetBackup is a powerful, easy-to-use WordPress backup and migration plugin. Create full or partial backups, restore in 1 click, and migrate across domains or hosts. Supports TAR format, cloud storage, and full automation. Download JetBackup premium versions here: https://www.jetbackup.com/jetbackup-for-wordpress. See JetBackup in Action Here! Free Features Free Cloud Storage – 2 GB of free off site premium cloud storage Unlimited backup – create as many backups as you want, there is no limit Backup files, database or both – you can backup your database or files, or both Unlimited restore – restore any backup file whenever needed Download backup – download your backup files for migration Import backup – upload your backup file to restore it right away Backup cancellation – cancel the backup process while it is not finished yet Manage backups – delete backups, view backup or restore log Backup customization – you choose which folders you want to backup Live progress – precise progress of the current backup and restore process Export Backups – Export backups to hosting control panels (supports cPanel & DirectAdmin) MultiSite – Multisite support with selective subsite restore. Website migration – migrate your website from one hosting/domain to another one Scheduled backup – set the frequency and time to perform automatic backup Multiple scheduled profiles – schedule your database and files to backup with different frequencies Backup retention – specify the number of backups you want to keep on your server Premium Features Off Site Backups – Support for offsite remote backup destinations: Amazon S3 (and compatible), FTP, SFTP, Google Drive, One Drive, DropBox, Box, pCloud – 24/7 Premium Support – Industry-leading support with a 15-minute SLA. Documentation The documentation can be found here: https://www.jetbackup.com/jetbackup-for-wordpress. Why JetBackup? – No extra libraries required – Supports large websites – Uses TAR archives for efficient storage – Optimized for low-memory & shared hosting – Seamless migration with serialized data refactoring Minimum Requirements – WordPress: 6.0 or higher – PHP: 7.4 or higher (requires zlib & cURL) Support https://www.jetbackup.com/jetbackup-for-wordpress/support Features One-Click Backup Perform full or custom backups with a single click. Reliable Restores Easily restore backups with a high success rate. Download & Upload Download backups or import them via our wizard. Cloud Storage (Pro) Automatically store backups on cloud platforms. Automated Backups Schedule automatic backups to run at set intervals. Custom Backup Settings Select specific files/folders for backup. Server-Level Integration Restore backups created by your hosting provider via JetBackup. Background Mode Run backups in low-priority mode for better performance. Email Notifications Receive alerts on backup success or failure. Documentation Perform manual backup If you want to create a backup manually, follow these steps: Go to “Backup jobs” page Click “Run now” on the default backup job. Import backups from local computer If you have an exported backup file in your PC and you want to import it into your website, follow these steps: Go to “Backups” page Click on “Import & Restore” and select your file from your local computer Go to the kitchen, prepare a cup of coffee and watch the screen 🙂 Restore Restoring is as easy as backing up. Just follow these instructions: Go to “Backups” page Choose your backup and click on the “Restore” button. Full documentation

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C