WordPress plugin
Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 9 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High4
- Medium5
- Low0
All Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Authenticated (Admin+) Command Injection ≤1.16.10Update to 1.17.0 | CVE-2025-2257 | |
| High7.2 | Authenticated (Administrator+) Remote Code Execution via Backup Settings ≤1.16.6Update to 1.16.7 | CVE-2024-9461 | |
| High7.5 | Improper Authorization to Unauthenticated Arbitrary File Download ≤1.15.8Update to 1.15.9 | CVE-2024-24869 | |
| High7.5 | Unauthenticated Backup Download ≤1.14.9Update to 1.14.10 | CVE-2020-36848 |
- High7.2Authenticated (Admin+) Command Injection
≤1.16.10Update to 1.17.0
- High7.2Authenticated (Administrator+) Remote Code Execution via Backup Settings
≤1.16.6Update to 1.16.7
- High7.5Improper Authorization to Unauthenticated Arbitrary File Download
≤1.15.8Update to 1.15.9
- High7.5Unauthenticated Backup Download
≤1.14.9Update to 1.14.10
Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid: common questions
Does Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid have known vulnerabilities?
Yes. VulnCrest Radar lists 9 known vulnerabilities in Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid: 4 high, 5 medium. None are known to affect version null.
How do I check which version of Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid vulnerability?
CVE-2026-16253, published Aug 14, 2026: Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid < 1.17.3 - Unauthenticated Information Exposure. Severity: Medium (CVSS 5.3).
Is any Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid vulnerability listed in CISA KEV?
No. None of the known Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid vulnerabilities is currently listed in the CISA KEV catalog.