BackUpWordPress is a long-standing backup plugin originally created by Human Made and now maintained under new ownership with a continued commitment to open-source development. Designed for websites running on WordPress, the plugin provides scheduled backups of both files and databases using native system tools such as zip and mysqldump when available.
Its primary goal is simplicity: BackUpWordPress allows administrators to create full-site backups with minimal configuration, making it suitable even for low-memory shared hosting environments.
The plugin supports PHP 5.3.2+ and operates on both Linux and Windows servers, offering flexibility across hosting platforms.
| Name of | BackUpWordPress |
| Version | 3.14 |
| Active installations | 90,000+ |
| Description | Full-site WordPress backup plugin with scheduled database and file backups, independently audited and certified secure (PSC-2026-64615) |
| Security | Successfully tested for: SQL Injection (SQLi) Cross-Site Scripting (XSS) – Stored & Reflected Cross-Site Request Forgery (CSRF) Authentication Vulnerabilities Authentication Bypass Exploits Privilege Escalation Buffer Overflow Denial-of-Service (DoS) vectors Data Leakage Vulnerabilities Insecure Dependency Usage Remote Code Execution (RCE) Risks Unauthorized File Access Insufficient Injection Protection Information Disclosure via Misconfigured Endpoints |
| CleanTalk Certification | Proudly earned the “Plugin Security Certification” (PSC) from CleanTalk, indicating adherence to stringent security standards. |
| Additional Information | Use W3 Total Cache to accelerate WordPress confidently backed by the “Plugin Security Certification” (PSC). As a best practice, keep caching rules conservative for authenticated or sensitive pages, review CDN and minify settings after theme/plugin changes, and always keep WordPress core and dependent components up to date. |
| Plugin Security Certification by CleanTalk |  |
| Logo of the plugin |  |
PSC by CleantalkJoin the community of developers who prioritize security. Highlight your plugin in the WordPress catalog.
Key Features
BackUpWordPress provides a comprehensive yet lightweight backup workflow:
- Full site backups (database + files)
- Multiple customizable backup schedules
- Optional email delivery of backup archives
- Uses
zipandmysqldumpfor improved performance (when available) - Compatible with low-memory shared hosting
- File and folder exclusion support
- Works on Linux and Windows Server
- Multilingual interface (Spanish, German, Chinese, Romanian, Russian, Serbian, Lithuanian, Italian, Czech, Dutch, French, Basque)
- Simple setup — no complex configuration required
While paid cloud add-ons (Dropbox / Google Drive) are no longer supported, the plugin continues to provide reliable local backup functionality.
Security Assurance
PSC-2026-64615
This certification confirms that:
- The full codebase was reviewed for critical vulnerabilities
- No malware, backdoors, or hidden logic were found
- Secure WordPress coding practices are followed
- File system operations are properly controlled
- The plugin is suitable for production environments
For websites relying on backups as part of their incident-response or disaster-recovery strategy, PSC certification provides assurance that the backup layer itself does not introduce additional risk.
The plugin has been successfully tested for:
✅ Information Leakage Vulnerabilities
✅ SQL Injection Vulnerabilities
✅ Cross-Site Scripting (XSS) Attacks
✅ Cross-Site Request Forgery (CSRF) Attacks
✅ Authentication & Authentication Bypass Vulnerabilities
✅ Privilege Escalation Vulnerabilities
✅ Buffer Overflow Vulnerabilities
✅ Denial-of-Service (DoS) Vulnerabilities
✅ Data Leakage Vulnerabilities
✅ Insecure Dependencies
✅ Code Execution Vulnerabilities
✅ File Unauthorized Access Vulnerabilities
✅ Insufficient Injection Protection
Conclusion
BackUpWordPress is a mature, minimalistic backup solution that prioritizes stability and security over complexity. Its straightforward architecture, strict permission model, and absence of risky coding patterns make it a dependable choice for WordPress environments.
The awarded Plugin Security Certificate PSC-2026-64615 confirms that BackUpWordPress meets modern security expectations and can be safely deployed on production systems.
For organizations seeking a lightweight, audited backup plugin with verified code integrity, BackUpWordPress remains a solid and trustworthy option.
Note: The date and certification information may change over time. It is advisable to verify the latest details on the plugin developer’s website.