MP Customizer Backups Security & Risk Analysis

wordpress.org/plugins/mp-customizer-backups

Backup the Theme Mods in your Customizer with either a click or by triggering a function.

200 active installs v1.0.3 PHP + WP 3.0.1+ Updated Mar 5, 2018
backupbackupscustomizertheme-mods
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is MP Customizer Backups Safe to Use in 2026?

Generally Safe

Score 85/100

MP Customizer Backups has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago
Risk Assessment

The "mp-customizer-backups" plugin v1.0.3 exhibits a strong security posture based on the provided static analysis. The complete absence of known CVEs and unpatched vulnerabilities, coupled with no recorded common vulnerability types, suggests a history of stable and secure development. The code analysis reveals no critical or high severity taint flows, indicating a good effort to prevent injection attacks. Furthermore, the plugin demonstrates good practices by using prepared statements for all SQL queries, implementing nonce checks, and capability checks on its limited entry points.

Key Concerns

  • Low percentage of properly escaped output
Vulnerabilities
None known

MP Customizer Backups Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

MP Customizer Backups Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
57
15 escaped
Nonce Checks
9
Capability Checks
1
File Operations
2
External Requests
2
Bundled Libraries
0

Output Escaping

21% escaped72 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
mp_download_customizer (includes\misc-functions\customizer-backups.php:483)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

MP Customizer Backups Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 16
actionadmin_menuincludes\misc-functions\customizer-backups.php:27
actionadmin_enqueue_scriptsincludes\misc-functions\customizer-backups.php:50
actionadmin_initincludes\misc-functions\customizer-backups.php:312
actionadmin_initincludes\misc-functions\customizer-backups.php:349
actionadmin_initincludes\misc-functions\customizer-backups.php:383
actionadmin_noticesincludes\misc-functions\customizer-backups.php:473
actionadmin_initincludes\misc-functions\customizer-backups.php:507
actionadmin_initincludes\misc-functions\customizer-backups.php:592
actioncustomize_controls_print_footer_scriptsincludes\misc-functions\customizer-backups.php:617
actionadmin_noticesincludes\plugin-checker\class-plugin-checker.php:102
actionadmin_menuincludes\plugin-checker\class-plugin-checker.php:128
action_admin_menuincludes\plugin-checker\class-plugin-checker.php:862
actionadmin_menuincludes\plugin-checker\class-plugin-installer.php:70
filtermp_core_check_pluginsincludes\plugin-checker\included-plugins\mp-core-check.php:42
actioninitmp-customizer-backups.php:92
actionplugins_loadedmp-customizer-backups.php:133
Maintenance & Trust

MP Customizer Backups Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29
Last updatedMar 5, 2018
PHP min version
Downloads5K

Community Trust

Rating100/100
Number of ratings1
Active installs200
Developer Profile

MP Customizer Backups Developer Profile

Phil Johnston

3 plugins · 510 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect MP Customizer Backups

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/mp-customizer-backups/js/customizer_backups_admin.js
Script Paths
/wp-content/plugins/mp-customizer-backups/js/customizer_backups_admin.js
Version Parameters
mp-customizer-backups/js/customizer_backups_admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
mp-customizer-backups-createmp-customizer-backups-upload
Data Attributes
data-mp-customizer-backups-delete
JS Globals
mp_customizer_backups_vars
FAQ

Frequently Asked Questions about MP Customizer Backups