PLUGIN SECURITY
Is Zippy safe?
Incredibly easy solution to archive pages and posts as zip file and unpack them back even on the other website!
What this plugin does
- Slug:
zippy - Author: Gesundheit Bewegt GmbH
- 8000+ active installs
- 92/100 rating (16 reviews on wordpress.org)
- 234134 all-time downloads
- On WordPress.org since 2016-10-12
archivebackupcustom post typesmigrationzip files
Maintenance status
- Latest known version: 1.7.0
- Last updated: 2025-09-30 9:34pm GMT
- Tested up to WordPress: 6.8.8
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
5 known CVEs on file for Zippy. Reported between 2023 and 2024.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-52758 | Zippy [zippy] <= 1.7.0 (unfixed) | Unrestricted Upload of File with Dangerous Type | Critical 9.1 | < 1.7.0 | 1.7.0 | 2024-08-27 | ✓ fixed in latest |
| CVE-2024-27964 | Zippy [zippy] < 1.6.10 | Unrestricted Upload of File with Dangerous Type | High 8.8 | < 1.6.10 | 1.6.10 | 2024-03-13 | ✓ fixed in latest |
| CVE-2023-34381 | Zippy [zippy] < 1.6.3 | Missing Authorization | Medium 5.3 | < 1.6.3 | 1.6.3 | 2023-07-12 | ✓ fixed in latest |
| CVE-2023-36381 | Zippy [zippy] < 1.6.6 | Deserialization of Untrusted Data | Medium 6.6 | < 1.6.6 | 1.6.6 | 2023-06-28 | ✓ fixed in latest |
| CVE-2023-26533 | Zippy [zippy] < 1.6.2 | Exposure of Sensitive Information to an Unauthorized Actor | Medium 6.5 | < 1.6.2 | 1.6.2 | 2023-03-30 | ✓ fixed in latest |
How to fix it
Keep Zippy updated — 1.7.0 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- All-in-One WP Migration and Backup — 5000000+ active installs — 90/100 (7665) — max PHP <8.0
- UpdraftPlus: WP Backup & Migration Plugin — 3000000+ active installs — 96/100 (8636) — max PHP <8.0
- Jetpack – WP Security, Backup, Speed, & Growth — 3000000+ active installs — 74/100 (2406)
- Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More — 1000000+ active installs — 98/100 (4929) — max PHP <8.0
- ManageWP Worker — 1000000+ active installs — 92/100 (678) — max PHP <8.0
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.