Plugin icon

Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid

boldgrid-backup

Vulnerabilities:

10

Last Updated:

August 18, 2026

Active Installs:

50000

Published
Title
Fixed in
CVSS
Published
2026-08-10
Title
Total Upkeep < 1.17.3 - Unauthenticated Sensitive Data Disclosure and Forced Site Restore via Predictable cron_secret
Fixed in
Fixed in 1.17.3
CVSS
7.7 (high)
Published
2026-08-04
Title
Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid < 1.17.3 - Missing Authorization
Fixed in
Fixed in 1.17.3
CVSS
5.3 (medium)
Published
2026-04-30
Title
Total Upkeep < 1.17.2 - Missing Authorization to Unauthenticated Rollback Cancellation
Fixed in
Fixed in 1.17.2
CVSS
5.3 (medium)
Published
2025-03-25
Title
Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid < 1.17.0 - Authenticated (Admin+) Command Injection
Fixed in
Fixed in 1.17.0
CVSS
7.2 (high)
Published
2025-02-26
Title
Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid < 1.16.9 - Authenticated (Administrator+) Server-Side Request Forgery
Fixed in
Fixed in 1.16.9
CVSS
4.9 (medium)
Published
2024-11-26
Title
Total Upkeep < 1.16.7 - Authenticated (Administrator+) Remote Code Execution via Backup Settings
Fixed in
Fixed in 1.16.7
CVSS
7.2 (high)
Published
2024-02-02
Title
Total Upkeep < 1.15.9 - Improper Authorization to Unauthenticated Arbitrary File Download
Fixed in
Fixed in 1.15.9
CVSS
7.5 (high)
Published
2022-02-24
Title
Total Upkeep < 1.14.14 - Subscriber+ Backup Disclosure
Fixed in
Fixed in 1.14.14
CVSS
4.3 (medium)
Published
2020-12-14
Title
Total Upkeep by BoldGrid < 1.14.10 - Sensitive Data Disclosure (Server IP Address, UID etc)
Fixed in
Fixed in 1.14.10
CVSS
5.3 (medium)
Published
2020-12-14
Title
Total Upkeep by BoldGrid < 1.14.10 - Unauthenticated Backup Download
Fixed in
Fixed in 1.14.10
CVSS
7.5 (high)