WebToffee WP Backup and Migration

78 Quality Score

Active Installs

17/30

With around 5,000 active installs, adoption is modest and lags far behind the leading alternatives, which means fewer real-world bug reports and a smaller community of users you can lean on.

Update Freshness

25/25

The plugin was updated in March 2026, the minimum PHP requirement is a reasonable 5.6, and it claims compatibility with WordPress 7.0, which all points to an actively maintained codebase.

User Rating

14/15

A 90 out of 100 from 49 reviewers is a strong score, though the small sample size means the average can be skewed by a handful of enthusiastic or frustrated users.

Support Health

8/15

The public support forum shows 0 threads and 0 resolved tickets, so there is no visible track record of how the team handles troubleshooting or bug reports in practice.

WP Compatibility

15/15

A wide supported WordPress range from 3.3 through 7.0, plus the 5.6 PHP floor, means it should install cleanly on virtually any currently running WordPress site.

Scores higher than 61% of indexed plugins

About

Easily backup, restore, or migrate. Supports one-click backup and scheduled backup. Backup selected content to Amazon S3, Google Drive, FTP/SFTP, etc.

Active Installs 5k+

Rating ★★★★½ 4.5/5

Last Updated 2026-09-24 7:11am GMT

Requires WordPress 3.3+

Tested Up To 7.1.2

Requires PHP 5.6+

Security History

7 known vulnerabilities, all patched

7 Medium

Most recent: January 13, 2025

View details ▸

WebToffee WP Backup and Migration <= 1.5.3 - Unauthenticated Sensitive Information Exposure Medium

January 13, 2025 Patched in ["1.5.4"] CVE-2025-24651

WordPress Backup & Migration <= 1.4.8 - Missing Authorization to Directory Traversal Medium

April 22, 2024 Patched in ["1.4.9"] CVE-2024-3546

WordPress Backup & Migration <= 1.4.7 - Unauthenticated Sensitive Information Exposure Medium

April 5, 2024 Patched in ["1.4.8"] CVE-2024-31254

WordPress Backup & Migration <= 1.4.3 - Missing Authorization to Settings Update Medium

November 6, 2023 Patched in ["1.4.4"] CVE-2023-5737

WordPress Backup & Migration <= 1.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting Medium

November 6, 2023 Patched in ["1.4.5"] CVE-2023-5738

WordPress Backup & Migration <= 1.4.1 - Missing Authorization to Settings and Schedule Modification Medium

October 11, 2023 Patched in ["1.4.2"] CVE-2023-45636

WordPress Backup & Migration <= 1.4.0 - Missing Authorization via wt_delete_schedule Medium

May 24, 2023 Patched in ["1.4.1"] CVE-2023-33928

What It Does

WebToffee WP Backup and Migration handles full-site, database, or selected-content backups with one-click and scheduled options, then ships those backups off to remote destinations such as Amazon S3, Google Drive, and FTP/SFTP. It also functions as a migration tool, letting you move a WordPress site to a new host or domain by packaging and restoring the backup on the target. In practice, it is a single plugin that covers both disaster recovery and site relocation without needing separate add-ons for the most common cloud targets.

Who It's For

This plugin is a sensible fit for small to mid-sized WordPress site owners who want a single tool to cover daily backups, offsite storage, and the occasional site move without configuring multiple plugins. Agencies and freelancers juggling several client sites will also benefit from the scheduled backup and multi-destination support, which reduces the risk of losing billable work. It is not aimed at, nor required by, users who are already happy with a host-managed backup solution.

Who Should Skip It

If your hosting provider already offers automated daily backups with offsite retention (such as managed WordPress hosts or most modern VPS plans), this plugin adds complexity without much real value. Enterprise teams with strict RPO/RTO requirements, encrypted-at-rest mandates, or compliance audit trails should look at dedicated backup platforms instead, since this plugin lacks the granular policy controls those environments demand.

The Bottom Line

WebToffee WP Backup and Migration is a competent, actively maintained tool that genuinely covers backup, restore, and migration in one package, and the 90/100 user rating backs that up. The weak spots are the small install base and a public support forum with zero resolved threads, so you are somewhat dependent on the developer responding through other channels. At an overall quality score of 77.57/100, it is a reasonable choice but not a category leader, and most users will be better served by UpdraftPlus or Duplicator unless a specific WebToffee feature is a deciding factor.

Pick UpdraftPlus if you want the most battle-tested free backup plugin with 3 million installs, a large community, and proven restore reliability across countless hosting environments.

Duplicator – Backups & Migration Plugin 95/100

Choose Duplicator if site migration is your primary need, since its package-based approach is widely regarded as the most dependable for moving WordPress to a new host or staging environment.

WP STAGING – WordPress Backup, Restore, Migration & Clone 92/100

Choose WP STAGING if you primarily need to spin up staging or test copies of your live site quickly, since its push-button cloning is its main strength.

BackWPup – WordPress Backup & Restore Plugin 90/100

Choose BackWPup if you want a long-established free option with broad cloud destination support and a large install base of 500,000 sites.

Backuply – Backup, Restore, Migrate and Clone 87/100

Choose Backuply if you want a similar all-in-one backup and migration tool but with a larger user base (700,000 installs) and a slightly higher quality score.