Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid

Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2020 and 2026; all 9 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 4 high. 2026 was the busiest year with 3 disclosures.

The most common weakness is Missing Authorization, behind 3 of the records (33%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, OS Command Injection.

Every one of the 9 issues recorded for Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid has a vendor fix available, so running the current release closes all known holes.

9 independent researchers contributed these findings, one record each. Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid is installed on roughly 50,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

9

Get automatic notifications for all Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.5CVE-2024-24869

Total Upkeep <= 1.15.8 - Improper Authorization to Unauthenticated Arbitrary File Download

Read the full analysis

Vulnerability Records

9 records
2026-08-14 00:00CVE-2026-16253
5.3
Medium
Jakub HermanYes
2026-08-04 00:00CVE-2026-66708
5.3
Medium
Nguyen Ba Khanh - HPT Vietnam CorporationYes
2026-04-30 00:00CVE-2026-3143
5.3
Medium
Nabil IrawanYes
2025-03-25 00:00CVE-2025-2257
7.2
High
stervaYes
2025-02-26 00:00CVE-2024-13907
4.9
Medium
ngosytuan & quyetntYes
2024-11-26 00:50CVE-2024-9461
7.2
High
Jonas Benjamin FriedliYes
2024-02-02 00:00CVE-2024-24869
7.5
High
belugaYes
2022-02-24 00:00CVE-2022-4932
4.3
Medium
Chloe ChamberlandYes
2020-12-14 00:00CVE-2020-36848
7.5
High
WadeekYes
Showing 1–9 of 9 reports
Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid banner
Latestv1.17.4

Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid

BoldGrid

Author

BoldGrid

4.8(440)
96/100
Last Updated
2026-08-18 (25d ago)
Active Installs
50,000+
Downloads
2,316,484
Requires WP
5.0+
Requires PHP
7.4+
Tested up to
WP 7.1
Created
2018-05-23 (8y ago)

Total Upkeep is more than just a “backup plugin.” It can help stop website crashes before they even happen. Website data loss can happen even if you’re doing everything “right,” like keeping your WordPress and plugins updated or having a backup plugin installed. There’s so many things outside of your control that could totally wipe out your website without any warning. To keep your website safe, you’ll need more than just a “backup plugin.” You need a backup solution that helps prevent catastrophic data loss in the first place, and if the worst occurs, provides you with the tools to easily, quickly and painlessly get your site up and running again. Total Upkeep is a full 360 solution that keeps your data safe and protects your website from catastrophic data loss. Features include: Automated and manual backups Full file and database backup or customize settings based on your needs Remote backups via FTP / SFTP, Amazon S3 and Google Drive (Premium) Total Upkeep checks to ensure that your web server has the necessary features to properly create backup archives, which protects the integrity of your backups Clone, duplicate and/or migrate your site with just a few clicks Site Check monitors your site for issues that could lead to site crashes, provides a tool set to restore your site even if your WordPress installation is inaccessible Auto rollback feature creates a backup before updates, restores your site to the last backup if an update fails Create staging sites to test new plugins or themes with Total Upkeep + Cloud WordPress I’m Intrigued! Tell Me More About Your Features… Supports Both Automated and Manual Backups Simply select a date and time for automatic backups and Total Upkeep will create a backup archive of your entire WordPress installation and its database. If a full website or database backup isn’t required, you can choose to backup only certain files, folders and database tables. Remote Backups Safely store backups remotely via FTP / SFTP. The premium version of Total Upkeep allows you to automatically upload archives to Amazon S3 or Google Drive. Easy Site Restoration and Website Migration Download, restore, or delete backups with a single click from the Total Upkeep Dashboard. Restore Your Website Even If WordPress Is Down Use our restoration script to restore a backup from outside of WordPress in the event WordPress itself has been corrupted. Restore Entire Backup Archive or Single Files Need to restore only one file from a backup? Total Upkeep Premium gives you the option to restore a single file within the backup browser. Historical Versions Do you have a file that needs to be restored, but not sure which backup it’s in? The Historical Versions feature allows you to view a list of all of your backups containing that file and provides an easy way to restore the file. Easily Clone or Migrate Your Websites Total Upkeep allows you to easily clone a website and migrate it to another WordPress installation with just a few clicks. Install Total Upkeep on both WordPress sites, create a backup archive on the first site, then restore that backup on your second site using a protected link – simply copy and paste the link! It’s the easiest and fastest way to duplicate / clone your website. Site Check Site Check monitors your site at specified intervals for errors that could lead to catastrophic data loss. If Site Check detects an error, it will send you an email alert and auto restore your website using your latest backup. Built-in Diagnostic Tools Site Check keeps a running historical error log, allowing you to easily diagnose and troubleshoot website issues. Powerful Website Restoration Functionality You can configure Site Check’s settings from the Total Upkeep settings page, or via command line. If your site is totally non-functional, you can use the command line to easily restore your website from the last full backup archive. Auto Rollback You can set Total Upkeep to automatically backup your site before updates, and automatically rollback your site to the last backup if an update fails. Automatic updates can be set for WordPress core, plugins, and themes individually. Create Staging Sites with Total Upkeep + Cloud WordPress Cloud WordPress allows you to create a fully functional free WordPress demo (with or without BoldGrid) in just a few clicks. Use Total Upkeep to clone and migrate your website to a Cloud WordPress installation, where you can test themes, plugins and other website changes without fear of breaking your live site. Try out the Total Upkeep Plugin on Cloud WordPress to see for yourself!

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C