The State of WordPress Security in 2026: What 7.6 Million Live Sites Told Us
We measured the live security posture of 7,589,296 WordPress sites — headers, exposed files, username leaks, malware, and core versions. 83% fail a basic header check and 37% hand out their usernames. Almost all of it is fixable in an afternoon.
Read more →