WordPress maintenance or security needs? Reach out!
TLDWP

WordPress Domains by PHP Version

The PHP versions powering the WordPress domains we've scanned (grouped by major.minor), alongside how each group scores across our infrastructure security checks. Versions marked EOL are end-of-life and no longer receive security patches — running an unsupported version introduces significant security risk. Data is parsed from the X-Powered-By HTTP header, covering domains that expose version details; metric coverage expands continuously as domains are rescanned.

Security Exposures by Top PHP Versions

Coloured against the all-WordPress average — green beats it, red is worse. Site counts use TLDWP's canonical detected population; percentages use the corresponding cached security sample. Click a column to sort.

# PHP Sites Fail headers Leak usernames Exposed files HTTPS
1 7.4 EOL 229,257 94.9% 61.2% 2.5% 96.7%
2 8.3 215,937 88.4% 53.5% 2.1% 97.8%
3 8.2 159,899 86.3% 50.7% 1.7% 97.9%
4 8.4 105,052 91.5% 55.8% 2.4% 97.2%
5 8.1 EOL 104,930 90.2% 58% 2.7% 97.7%
6 8.0 EOL 51,940 94.6% 62.7% 1.8% 97.8%
7 8.5 37,110 89.3% 50.8% 1.6% 97.5%
8 7.3 EOL 24,047 96.6% 63.7% 2.9% 96.8%
9 7.1 EOL 21,405 99.5% 22% 0.8% 95.6%
10 7.2 EOL 20,221 97.3% 67.8% 5.8% 96.8%
11 5.6 EOL 19,946 98.1% 61.3% 4.1% 91.1%
12 7.0 EOL 12,006 97.6% 70.2% 2.8% 96%
13 5.4 EOL 5,697 98.8% 63.6% 3.7% 88.7%
14 5.3 EOL 5,245 99.1% 61.4% 2.5% 75.7%
15 5.5 EOL 3,022 97.9% 61.3% 4% 85.1%
16 5.2 EOL 966 99.2% 54.3% 6.4% 64.3%
17 4.4 EOL 41 100% 14.6% 4.9% 58.5%
18 3.1 EOL 36 30.6% 25% 0% 100%
19 5.1 EOL 26 96.2% 26.9% 7.7% 34.6%
20 4.3 EOL 4 100% 0% 0% 25%
21 8.6 4 100% 25% 0% 75%
22 4.0 EOL 2 100% 50% 0% 100%
23 5.0 EOL 1 100% 0% 100% 0%
24 9.1 1 0% 0% 0% 100%