The PHP version powering the WordPress sites we've scanned (grouped by major.minor), with how each group scores on our security checks. Versions marked EOL are end-of-life and no longer receive security updates — running one is itself a security risk. Read from the X-Powered-By header, so it only covers sites that expose it; coverage grows as sites are rescanned.
PHP version data is still being collected — it will appear here as sites get rescanned.