shouldiuse.io

Categories

VERDICT

BlogVault Review

Depends

Should I use BlogVault?

Recover your website within minutes from the worst disaster that may strike your WordPress site. With incremental backups, GDPR compliant storage, 1-click - blogvault.net

· 1 month ago

Buy if you run a revenue-generating WordPress or WooCommerce site and want managed off-site backups with one-click restore. Skip it for hobby blogs or brochure sites, where a free plugin is enough.

Confidence

Medium. Based on 20+ public sources: review sites, Reddit threads, security advisories, pricing pages, and company data.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

$149/year

Entry plan

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierNo

Best for

  • Revenue-generating WordPress sites
  • WooCommerce stores
  • Agencies managing many client sites
  • Non-technical owners wanting one-click restore

Not for

  • Hobby blogs — a free plugin does the job
  • One-page brochure sites
  • Anyone unwilling to pay ~$149/year for backups
  • Teams that can't tolerate a backup tool with its own CVE history

Gotchas - check before you buy

high

CVE-2026-19718: authentication bypass via weak randomness in the backup plugin

high

BlogVault/MalCare/WP Remote 6.6.5 allowed unauthenticated site takeover via brute force

medium

Entry plan runs about $149/year; trial is limited; free plugins undercut it

low

Backups live on BlogVault's own servers, not your own cloud storage

Pros and cons

Pros

  • Reviewers say it delivers on its fast-recovery promise
  • Combines incremental backups, staging, migration, and security in one service
  • 5-star rating on Trustpilot
  • Runs backups on its own servers, independent of your host
  • G2 reviewers are strongly positive

Cons

  • $149/year entry price; UpdraftPlus free tier costs nothing
  • Reddit users cite cheaper alternatives like WPvivid
  • Backup plugin has had authentication-bypass vulnerabilities
  • A past breach infected customers' sites with malware
  • Some Reddit users report wasted time on unresolved issues

Sources & method

- 13 sources - Multiple plugin CVEs reported; a past breach infected some customer sites.

official x2review x6security x3news x2
  • CVE-2026-19718 — authentication bypass, Weak PRNG in the BlogVault Backup & Staging plugin enabled authentication bypass; company published a security update notice.
  • Unauthenticated site takeover, Versions 6.6.5 of BlogVault, MalCare, and WP Remote were vulnerable to site takeover via brute force.
  • Historical customer-site breach, A past security breach infected customers' sites with malware; the company issued a security notification.
  • PHP object injection (v1.44), An older version of the real-time backup plugin was vulnerable to PHP object injection.

Key stats

  • Value for money: 3/5

    Rating

  • $149/year

    Starting price

  • 13

    Sources

  • Analyzed

  • Value for money: 3/5. Solid service; free and cheaper rivals undercut it
  • Ease of use: 4/5. Reviewers call install and restore easy
  • Feature depth: 4/5. Backups, staging, migration, security in one
  • Support quality: 3/5. Trustpilot praise, but Reddit support complaints
  • Security posture: 2/5. Recent auth-bypass CVE plus past breach
  • 5/5 Trustpilot rating Per Trustpilot reviews
  • $149/year Starting price Entry backup plan
  • No Free tier Limited free trial only
  • $9.5M Est. ARR 2024 estimate, GetLatka

Pricing

Entry plan

$149/year

  • Incremental backups, 1-click restore
  • GDPR-compliant off-site storage
  • Limited free trial available

Security

Multiple plugin CVEs reported; a past breach infected some customer sites.

  • CVE-2026-19718 — authentication bypassWeak PRNG in the BlogVault Backup & Staging plugin enabled authentication bypass; company published a security update notice.⁹
  • Unauthenticated site takeoverVersions 6.6.5 of BlogVault, MalCare, and WP Remote were vulnerable to site takeover via brute force.10
  • Historical customer-site breachA past security breach infected customers' sites with malware; the company issued a security notification.⁸
  • PHP object injection (v1.44)An older version of the real-time backup plugin was vulnerable to PHP object injection.11

What users say

Trustpilot and G2 sentiment is strongly positive, while Reddit threads are mixed, flagging cheaper rivals and support frustrations.

“Blogvault has 5 stars!”
Trustpilot review
“WPvivid is the cheaper alternative”
Reddit, r/Wordpress
Full analysis

Based on 20+ public sources: review sites, Reddit threads, security advisories, pricing pages, and company data.

Trusted WordPress backup with staging and one-click restore — but real CVEs and cheaper rivals. Fit for business sites.

Methodology

Based on 20+ public sources: review sites, Reddit threads, security advisories, pricing pages, and company data.

Read how a report is made.

Sources

  1. BlogVault — Backups, Staging, Migration And Securityblogvault.net
    official
  2. BlogVault Pricingblogvault.net
    official
  3. BlogVault Review 2026: Is the $149/Year Backup Worth It?fatlabwebsupport.com
    review
  4. BlogVault Reviews on G2g2.com
    review
  5. Trustpilot reviews of blogvault.nettrustpilot.com
    review
  6. Reddit: BlogVault alternative?reddit.com
    review
  7. Reddit: My issues with BlogVaultreddit.com
    review
  8. BlogVault Security Breach Infects Customers' Sites With Malwarewptavern.com
    news
  9. CVE-2026-19718 in BlogVault Backup & Staging Pluginvuldb.com
    security
  10. Wordfence: BlogVault/MalCare/WP Remote 6.6.5 site takeoverwordfence.com
    security
  11. Acunetix: PHP object injection in blogvault v1.44acunetix.com
    security
  12. UpdraftPlus vs BlogVaultteamupdraft.com
    review
  13. BlogVault Inc Revenue 2024: $9.5M Est. ARRgetlatka.com
    news

Add this review to your site

This check for BlogVault says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends BlogVault Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.