Total Findings
638
Security Grade
Active Installs
3.0M+
Coding Score
100/100
Is UpdraftPlus: WP Backup & Migration Plugin secure? In WP HealthKit's independent 2026 audit, UpdraftPlus: WP Backup & Migration Plugin received an overall risk of CRITICAL and a report-card grade of D across 638 findings (17 critical, 173 high severity).
Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).
Show your audit status in your README or website.
[](https://wphealthkit.com/directory/updraftplus)
Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.
Site owners: should they update?
Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.
Claim This PluginGet a comprehensive security audit for your WordPress plugin or theme. Upload your zip and get results in minutes.
Start Free AuditCoding Standards
100/100
| Date | Version | Rating | Findings | Standards |
|---|---|---|---|---|
| 6/1/2026Latest | v1.26.4 | CRITICAL | 638 | 100/100 |
| 6/1/2026 | v1.26.4 | CRITICAL | 638 | 100/100 |
| 6/1/2026 | v1.26.4 | CRITICAL | 637 | 100/100 |
| 5/21/2026 | v1.26.4 |
| 666 |
| 100/100 |
| 4/8/2026 | v1.26.2 | CRITICAL | 1113 | 100/100 |