Backup Bolt

Backup Bolt has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; 3 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 4.9, and the most serious one scores 6.1 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (25%). Other recurring categories include Cross-Site Scripting, Exposure Of Sensitive Information To An Unauthorized Actor.

3 of the records (75%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

4 independent researchers contributed these findings, one record each. Backup Bolt is installed on roughly 800 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium

4.9/ 10

Patch Coverage75%

Open

Fixed

Get automatic notifications for all Backup Bolt vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-49040

Backup Bolt <= 1.4.1 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

4 records


2025-10-02 00:00	Backup Bolt <= 1.4.1 - Authenticated (Admin+) Arbitrary File Download Backup Bolt <= 1.4.1	`CVE-2025-10306`	3.8 Low	Jonas Benjamin Friedli	Yes
2025-08-19 00:00	Backup Bolt <= 1.4.1 - Cross-Site Request Forgery Backup Bolt <= 1.4.1	`CVE-2025-49040`	4.3 Medium	Nabil Irawan	No
2024-02-20 00:00	Backup Bolt <= 1.3.0 - Sensitive Information Exposure Backup Bolt <= 1.3.0	`CVE-2023-7236`	5.3 Medium	Dmitrii Ignatyev	Yes
2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Backup Bolt 1.1.0 – 1.1.3	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	Yes

Showing 1–4 of 4 reports

Latestv1.5.0

Backup Bolt

Author

Backup Bolt

4.7(13)

94/100

Last Updated

2025-10-05 (11mo ago)

Active Installs

800+

Downloads

18,895

Requires WP

4.0+

Requires PHP

5.6+

Tested up to

WP 6.8.8

Created

2022-04-21 (5y ago)

Backup Bolt is the easiest and simplest one click backup plugin you could ever find!. Now take a custom backup with minimal storage consumption or backup your full WordPress site with a click of button!. Clutter free straight forward interface. Download backup with zip compression. BACKUP FEATURES Super easy backup interface Custom backup for minimal storage consumption Full WordPress backup Backup size v/s Free memory calculation PCLZIP based faster backup process Realtime process logging during backup Generate large backups within seconds Download the backup in zip format Backups are auto deleted daily for storage consumption Show Your Support Rate Plugin – If you find this plugin useful, please leave a positive review. Your reviews are our biggest motivation for further development of the plugin. Submit a Bug – If you find any issue, please submit a bug via support forum. Thanks to SweetAlert2 for beautiful alert box script.

View on WordPress.org