Snapshotify – All-in-One Backup & Restore & Migrate

Snapshotify – All-in-One Backup & Restore & Migrate has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (100%).

The one issue recorded for Snapshotify – All-in-One Backup & Restore & Migrate has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Ananda Dhakal. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Snapshotify – All-in-One Backup & Restore & Migrate vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2026-42413

Snapshotify – All-in-One Backup & Restore & Migrate <= 1.3.2 - Unauthenticated Information Exposure

Read the full analysis

Vulnerability Records

1 records
Snapshotify – All-in-One Backup & Restore & Migrate banner
Latestv1.4.0

Snapshotify – All-in-One Backup & Restore & Migrate

DaftPlug

Author

DaftPlug

0.0(0)
0/100
Last Updated
2026-10-18 (2d ago)
Active Installs
0+
Downloads
875
Requires WP
6.2+
Requires PHP
7.4+
Tested up to
WP 7.1.3
Created
2026-06-27 (4mo ago)

Create full-site backups with a single click, restore, run automatic backups with cloud storage and migrate your site without touching a config file. 👉 Learn more about Snapshotify — full feature tour, screenshots, documentation and Pro pricing. 💾 Complete Backup & Restore, Simplified One-Click Backups – Create a full snapshot of your database and files in one click, with nothing to configure upfront. Upload Existing Backups – Upload a backup ZIP you already have and restore it directly from the dashboard. One-Click Restore – Restore any snapshot with a single click — Snapshotify handles extraction, database import, and URL migration automatically. Scheduled Backups (Pro) – Set up recurring automatic backups on a daily, weekly, or monthly schedule and forget about it. Retention Policy – Automatically keep only the latest N backups to prevent disk bloat, while manual and uploaded backups are always preserved. Email Notifications – Get an email when a backup or restore finishes or fails, so a failed job never goes unnoticed until you need the backup. Site Migration – Move your site to a new domain or host — Snapshotify rewrites all URLs and paths in the database automatically, handling serialized data safely. Easy Configuration – Configure and manage everything from a clean, intuitive settings panel with no coding required. 🗝️ What’s Inside Snapshotify covers the full backup lifecycle with purpose-built components: Backup Engine: Full-site snapshot including database and files, packaged as a standard ZIP archive. Database Backup: Full MySQL dump included in every snapshot, compatible with standard SQL importers. File Scanner: Smart file scanning that respects exclusion rules to skip caches, logs, and large irrelevant directories. Chunked Upload: Upload large backup archives in chunks — no PHP upload limits or timeouts to worry about. Extractor: Reliable ZIP extraction with progress tracking and error reporting. SQL Importer: Batched SQL import that handles large databases without hitting PHP memory or execution limits. Migrator: Safe URL and path replacement across the entire database — deserializes and reserializes PHP data to maintain correctness. Scheduled Backups (Pro): WP-Cron-driven recurring backups with configurable frequency (daily, weekly, monthly). Retention Policy: Automatic pruning of old automatic backups, keeping your storage usage predictable. Email Notifications: Per-event email alerts for completed and failed backups and restores, sent to any address you choose. 🚀 Upgrade to Snapshotify Pro The free version gives you the complete manual backup, upload, restore and migration workflow. Snapshotify Pro makes it run on its own and stores your archives safely offsite: Scheduled Automatic Backups – Recurring daily, weekly or monthly backups that run in the background and keep going even if the browser is closed. Cloud Storage Destinations – Send every backup to Google Drive, OneDrive or Dropbox, so a server failure never takes your backups with it. Restore & Download from the Cloud – Restore or download a cloud-stored archive directly from the dashboard, no manual re-upload needed. Automatic Retention – Keep only the latest N automatic backups, applied locally and in your cloud storage, while manual and uploaded backups are always preserved. Every Advanced Setting – All schedule, exclusion, storage and notification controls unlocked. Priority Support – Direct help from the team instead of the public support forum. Simple Pricing – Unlock Snapshotify Pro with a DaftPlug Pro membership (one licence covers every All-in-One Pro plugin). Plans are at daftplug.com/pricing. See everything in Snapshotify Pro → ⚡ Reliable, No Hassle No Coding Required: Full backup, restore, and migration workflows without touching a line of code. Large-Site Friendly: Chunked processing means backups and restores complete reliably even on large sites with slow hosts. Safe Serialization Handling: URL replacement during migration correctly handles PHP serialized data — no corrupt options or meta. High Quality: Built with a modular architecture for reliability and easy maintenance. Support: Get help in the support forum from friendly professionals ready to answer your questions. 🌐 Fully Translatable Snapshotify supports multiple languages and RTL layouts. It is fully translatable via POT files using tools like Poedit and Loco Translate, and is compatible with WPML, Polylang, TranslatePress, Weglot, and more. 🔌 Compatible with All Themes & Plugins Snapshotify works out-of-the-box with any WordPress setup, theme, or plugin. Whether you’re running a blog, WooCommerce store, membership site, or multisite, it integrates seamlessly without requiring extra configuration.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C