What’s Vulnerable › Products

boldgrid Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your boldgrid Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid version is affected

Latest boldgrid Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid vulnerabilities

• CVE-2026-66708 — WordPress Total Upkeep plugin <= 1.17.2 - Broken Access Control vulnerability (CVSS 8.2)
• CVE-2026-3143 — Total Upkeep <= 1.17.1 - Missing Authorization to Unauthenticated Rollback Cancellation (CVSS 5.3)
• CVE-2020-36848 — Total Upkeep by BoldGrid <= 1.14.9 - Unauthenticated Backup Download (CVSS 7.5)
• CVE-2025-2257 — Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid <= 1.16.10 - Authenticated (Admin+) Command Injection (CVSS 7.2)
• CVE-2024-13907 — Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid <= 1.16.8 - Authenticated (Administrator+) Server-Side Request Forgery (CVSS 6.5)
• CVE-2024-9461 — Total Upkeep <= 1.16.6 - Authenticated (Administrator+) Remote Code Execution via Backup Settings (CVSS 7.2)
• CVE-2024-24869 — WordPress Total Upkeep plugin <= 1.15.8 - Arbitrary File Download vulnerability (CVSS 7.5)
• CVE-2022-4932 — Total Upkeep <= 1.14.13 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure (CVSS 4.3)