WordPress maintenance or security needs? Reach out!
TLDWP

WordPress Domains by PHP Version

The PHP versions powering the WordPress domains we've scanned (grouped by major.minor), alongside how each group scores across our infrastructure security checks. Versions marked EOL are end-of-life and no longer receive security patches — running an unsupported version introduces significant security risk. Data is parsed from the X-Powered-By HTTP header, covering domains that expose version details; metric coverage expands continuously as domains are rescanned.

Security Exposures by Top PHP Versions

Coloured against the all-WordPress average — green beats it, red is worse. Site counts use TLDWP's canonical detected population; percentages use the corresponding cached security sample. Click a column to sort.

# PHP Sites Fail headers Leak usernames Exposed files HTTPS
1 7.4 EOL 19,178 94.8% 53.2% 2.4% 97.1%
2 8.3 15,002 88.1% 45% 2.3% 97.8%
3 8.2 9,520 88.4% 39.8% 2.2% 97.2%
4 8.1 EOL 7,436 90.8% 44% 2.7% 97.3%
5 8.4 6,866 89.5% 45.1% 2.2% 96.2%
6 8.0 EOL 3,733 94.2% 52.5% 2% 97.7%
7 7.3 EOL 1,986 96.6% 58.7% 2.8% 97.2%
8 8.5 1,964 86.3% 43.7% 2.1% 96.8%
9 7.2 EOL 1,866 97.4% 59.1% 4.4% 97.5%
10 7.1 EOL 1,900 99.4% 19.3% 0.9% 74.5%
11 5.6 EOL 1,616 98.2% 50.5% 3.8% 95.1%
12 7.0 EOL 972 97.7% 64.5% 3.2% 96.7%
13 5.4 EOL 501 97% 58.6% 3.7% 91.2%
14 5.3 EOL 436 99% 57.4% 1.7% 81.3%
15 5.5 EOL 254 99.2% 49.6% 2.1% 90.7%
16 5.2 EOL 80 100% 43.7% 7% 77.5%
17 4.4 EOL 7 100% 20% 40% 60%
18 5.1 EOL 3 66.7% 33.3% 0% 100%
19 8.6 2 100% 0% 0% 100%

All PHP versions 19 total

PHP versionDomains
PHP 7.4 19,178
PHP 8.3 15,002
PHP 8.2 9,520
PHP 8.1 7,436
PHP 8.4 6,866
PHP 8.0 3,733
PHP 7.3 1,986
PHP 8.5 1,964
PHP 7.1 1,900
PHP 7.2 1,866
PHP 5.6 1,616
PHP 7.0 972
PHP 5.4 501
PHP 5.3 436
PHP 5.5 254
PHP 5.2 80
PHP 4.4 7
PHP 5.1 3
PHP 8.6 2