Report

Should I Use BlogVault?

blogvault.net·Analyzed 2 hours ago·9/19/2026·Based on 13 sources

Recover your website within minutes from the worst disaster that may strike your WordPress site. With incremental backups, GDPR compliant storage, 1-click

Depends

Buy if you run a revenue-generating WordPress or WooCommerce site and want managed off-site backups with one-click restore.

Trusted WordPress backup with staging and one-click restore — but real CVEs and cheaper rivals. Fit for business sites.

Confidence: Medium

5/5

Trustpilot rating

Per Trustpilot reviews

$149/year

Starting price

Entry backup plan

Free tier

Limited free trial only

$9.5M

Est. ARR

2024 estimate, GetLatka

Value for money

Solid service; free and cheaper rivals undercut it

Ease of use

Reviewers call install and restore easy

Feature depth

Backups, staging, migration, security in one

Support quality

Trustpilot praise, but Reddit support complaints

Security posture

Recent auth-bypass CVE plus past breach

Pros

Reviewers say it delivers on its fast-recovery promise^³
Combines incremental backups, staging, migration, and security in one service^¹
5-star rating on Trustpilot^⁵
Runs backups on its own servers, independent of your host^³
G2 reviewers are strongly positive^⁴

Cons

$149/year entry price; UpdraftPlus free tier costs nothing¹²
Reddit users cite cheaper alternatives like WPvivid^⁶
Backup plugin has had authentication-bypass vulnerabilities^⁹
A past breach infected customers' sites with malware^⁸
Some Reddit users report wasted time on unresolved issues^⁷

Gotchas

highCVE-2026-19718: authentication bypass via weak randomness in the backup plugin^⁹
highBlogVault/MalCare/WP Remote 6.6.5 allowed unauthenticated site takeover via brute force¹⁰
mediumEntry plan runs about $149/year; trial is limited; free plugins undercut it^³
lowBackups live on BlogVault's own servers, not your own cloud storage^³

Best for

Revenue-generating WordPress sites
WooCommerce stores
Agencies managing many client sites
Non-technical owners wanting one-click restore

Not for

Hobby blogs — a free plugin does the job
One-page brochure sites
Anyone unwilling to pay ~$149/year for backups
Teams that can't tolerate a backup tool with its own CVE history

Pricing

Entry plan

$149/year

Incremental backups, 1-click restore
GDPR-compliant off-site storage
Limited free trial available

Security

Multiple plugin CVEs reported; a past breach infected some customer sites.

CVE-2026-19718 — authentication bypassWeak PRNG in the BlogVault Backup & Staging plugin enabled authentication bypass; company published a security update notice.^⁹
Unauthenticated site takeoverVersions 6.6.5 of BlogVault, MalCare, and WP Remote were vulnerable to site takeover via brute force.¹⁰
Historical customer-site breachA past security breach infected customers' sites with malware; the company issued a security notification.^⁸
PHP object injection (v1.44)An older version of the real-time backup plugin was vulnerable to PHP object injection.¹¹