Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid Security & Risk Analysis

The "boldgrid-backup" plugin v1.17.2 exhibits a concerning security posture primarily due to its significant attack surface without adequate authentication checks. The static analysis reveals 31 AJAX handlers, all of which lack proper authorization, presenting a wide entry point for potential exploitation. While the code demonstrates some good practices like a high percentage of prepared SQL statements and proper output escaping, the sheer number of unprotected AJAX endpoints is a critical weakness. The presence of dangerous functions like `exec`, `passthru`, and `shell_exec` further amplifies this risk, as they can be leveraged for OS command injection if attackers can influence their input through the vulnerable AJAX handlers.

The vulnerability history is also a major red flag. The plugin has a history of 6 known CVEs, with a significant number of high and medium severity vulnerabilities including OS Command Injection, SSRF, and authorization bypasses. The fact that the last vulnerability was patched in March 2025, while the current version is v1.17.2, suggests that this specific version might not have had these historical vulnerabilities addressed, or that new ones have emerged since then. The pattern of these vulnerabilities points to potential weaknesses in input sanitization and authorization logic, which are directly reflected in the static analysis findings of unprotected AJAX endpoints and the presence of dangerous functions.

In conclusion, despite some positive aspects in its code, the "boldgrid-backup" plugin v1.17.2 poses a significant security risk. The large number of unprotected AJAX entry points, coupled with the historical prevalence of severe vulnerabilities such as OS Command Injection and authorization issues, necessitates extreme caution. While there are no critical taint flows reported, the combination of these factors creates a high-risk environment for any WordPress site utilizing this plugin without strict access controls and ongoing security monitoring.