Backup by VOGA Press Security & Risk Analysis

wordpress.org/plugins/backup-by-vogapress

Simplest way to manage and monitor your backups with VOGAPress cloud service. FREE cloud backup service is available for personal WordPress site.

10 active installs v0.5.8 PHP + WP 3.0.1+ Updated Sep 24, 2016
back-upbackupfull-backupwordpress-backupwp-backup
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Backup by VOGA Press Safe to Use in 2026?

Generally Safe

Score 85/100

Backup by VOGA Press has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9yr ago
Risk Assessment

The backup-by-vogapress plugin exhibits a generally good security posture with no known historical vulnerabilities. Static analysis shows a clean slate regarding dangerous functions, critical taint flows, and a high percentage of SQL queries using prepared statements. The low number of entry points, all of which appear to have authentication checks, is also a positive sign. However, there are some areas for improvement. The 100% unsanitized paths in the taint analysis are a significant concern, indicating potential risks if any user-supplied data is used in file operations without proper sanitization, even if no critical flows were detected. Furthermore, while only two nonce checks are present, the complete lack of capability checks is a notable omission for a backup plugin that likely handles sensitive data. The high number of file operations (31) and external HTTP requests (9) also represent potential avenues for exploitation if not handled with extreme care.

Key Concerns

  • All taint flows have unsanitized paths
  • No capability checks found
  • Low percentage of output properly escaped (78%)
  • Only 2 nonce checks found
Vulnerabilities
None known

Backup by VOGA Press Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Backup by VOGA Press Code Analysis

Dangerous Functions
0
Raw SQL Queries
2
24 prepared
Unescaped Output
5
18 escaped
Nonce Checks
2
Capability Checks
0
File Operations
31
External Requests
9
Bundled Libraries
0

SQL Query Safety

92% prepared26 total queries

Output Escaping

78% escaped23 total outputs
Data Flows
8 unsanitized

Data Flow Analysis

8 flows8 with unsanitized paths
data_list (backup-by-vogapress.php:268)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Backup by VOGA Press Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 7
actioninitbackup-by-vogapress.php:118
actionnetwork_admin_menubackup-by-vogapress.php:228
actionnetwork_admin_noticesbackup-by-vogapress.php:229
actionadmin_noticesbackup-by-vogapress.php:230
actionadmin_menubackup-by-vogapress.php:232
actionadmin_noticesbackup-by-vogapress.php:233
filterplugin_action_linksbackup-by-vogapress.php:236
Maintenance & Trust

Backup by VOGA Press Maintenance & Trust

Maintenance Signals

WordPress version tested4.6.30
Last updatedSep 24, 2016
PHP min version
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Backup by VOGA Press Developer Profile

VOGAPress

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Backup by VOGA Press

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/backup-by-vogapress/css/bootstrap.min.css/wp-content/plugins/backup-by-vogapress/css/custom.css/wp-content/plugins/backup-by-vogapress/js/bootstrap.min.js/wp-content/plugins/backup-by-vogapress/js/custom.js/wp-content/plugins/backup-by-vogapress/js/jquery-1.11.1.min.js/wp-content/plugins/backup-by-vogapress/js/moment.min.js/wp-content/plugins/backup-by-vogapress/js/vue.min.js
Generator Patterns
Backup by VOGA Press v0.5.8
Script Paths
/wp-content/plugins/backup-by-vogapress/js/custom.js/wp-content/plugins/backup-by-vogapress/js/jquery-1.11.1.min.js/wp-content/plugins/backup-by-vogapress/js/moment.min.js/wp-content/plugins/backup-by-vogapress/js/vue.min.js/wp-content/plugins/backup-by-vogapress/js/bootstrap.min.js
Version Parameters
backup-by-vogapress/css/bootstrap.min.css?ver=backup-by-vogapress/css/custom.css?ver=backup-by-vogapress/js/bootstrap.min.js?ver=backup-by-vogapress/js/custom.js?ver=backup-by-vogapress/js/jquery-1.11.1.min.js?ver=backup-by-vogapress/js/moment.min.js?ver=backup-by-vogapress/js/vue.min.js?ver=

HTML / DOM Fingerprints

CSS Classes
vpb_container
HTML Comments
<!-- Generated by VOGA Press Backup -->
Data Attributes
data-vpb-id
JS Globals
vpb_params
REST Endpoints
/wp-json/vpb/v1/settings
FAQ

Frequently Asked Questions about Backup by VOGA Press