Prime Mover – Backup and Migration
Prime Mover – Backup and Migration has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2023; all 2 are fixed as of September 2026. Their average CVSS score is 6.9, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (50%). Other recurring categories include Missing Authorization.
Every one of the 2 issues recorded for Prime Mover – Backup and Migration has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by Dmitrii Ignatyev. Prime Mover – Backup and Migration is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2023-6505Prime Mover <= 1.9.2 - Sensitive Information Exposure via Directory Listing
Read the full analysisVulnerability Records
Prime Mover – Backup and Migration
Author
Codexonics
Easily Transfer WordPress Site to New Host/Server/Domain Move single-site installation to another single-site server. Move WP single-site to existing multisite sub-site. Migrate the subsite to another multisite subsite. Migrate multisite sub-site to single-site. Migrate within WordPress admin. WordPress backup and restore packages within single-site or multisite. Backup WordPress subsite (in multisite). You can back up the WordPress database within admin before testing something and restoring it with one click. Cross-platform compatible (Nginx / Apache / Litespeed / Microsoft IIS / Localhost). Clone a single site and restore it to any server. Clone subsite in multisite and restore it as single-site or multisite. Supports legacy multisites. Debug package. Supports backup of the non-UTF8 single-site or multisite database. PRO Features Scheduled backups: Automatic backup support for multisite and single-site. Save time during migration with the direct site-to-site package transfer. Move the backup location outside the WordPress public directory for better security. Migrate or backup WordPress multisite main site. Encrypt WordPress database in backups for maximum data privacy. Encrypt the WordPress media directory inside the backup for better security. Encrypt plugin and theme files inside the backup/package for protection. Export and restore the backup package from Dropbox. Save and restore packages from and to Google Drive. Exclude plugins from the backup (or network-activated plugins if multisite). Exclude upload directory files from the backup to reduce the package size. Improved migrated site performance by excluding unused database tables created by inactive plugins. Create a new multisite subsite with a specific blog ID. Disable network maintenance in multisite so only the affected subsite is in maintenance mode. Configure migration parameters to optimize and tweak backup/migration packages. It includes all complete restoration options at your own choice and convenience. Full access to the settings screen to manage all basic and plugin advanced configurations. Migrate non-UTF8 database charset to standard UTF8 database charset (utf8mb4). Migrate UTF8 database charset (utf8mb4) to non-UTF8 database charset (edge case scenario). Documentation Prime Mover Documentation
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C