{"id":10811,"date":"2026-09-28T11:29:08","date_gmt":"2026-09-28T15:29:08","guid":{"rendered":"https:\/\/hostingdiscussion.com\/news\/?p=10811"},"modified":"2026-09-28T11:29:08","modified_gmt":"2026-09-28T15:29:08","slug":"nearly-9-in-10-us-wordpress-sites-are-running-old-software","status":"publish","type":"post","link":"https:\/\/hostingdiscussion.com\/news\/nearly-9-in-10-us-wordpress-sites-are-running-old-software\/","title":{"rendered":"Nearly 9 in 10 US WordPress sites are running old software"},"content":{"rendered":"<p dir=\"ltr\">Hosting provider <a href=\"https:\/\/www.20i.com\/us\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">20i<\/a> scanned more than 18.8 million live WordPress sites in the United States and found that 87.86 percent, roughly 16.59 million, run a version older than <a href=\"https:\/\/hostingdiscussion.com\/news\/wordpress-7-0-locks-in-may-20-launch-date-and-hosting-providers-have-work-to-do\/\">WordPress 7.1<\/a>, the major release that arrived in August 2026. That is a big pile of sites falling behind, especially since WordPress shipped three security releases in under four weeks this summer.<\/p>\n<p dir=\"ltr\">The releases themselves show why timing matters. WordPress 7.0.2 fixed one critical and one high-severity issue, and versions 7.0.3 and 7.0.4 added more patches. Still, plenty of sites trail by far more than a point release. About 13.2 million US sites use WordPress 6.x, which covers releases from 2022 through 2026. Another 360,000 run 5.x, roughly 191,000 sit on 4.x, and 45,000 use versions dating back to between 2005 and 2010.<\/p>\n<p dir=\"ltr\">Size offers no protection, either. Micro-businesses lead at 88.4 percent outdated, yet more than four in five sites were outdated in every business-size category 20i checked. Even 86.8 percent of enterprise sites, meaning companies earning over $100 million a year, run outdated <a href=\"https:\/\/hostingdiscussion.com\/news\/wordpress-patches-critical-flaw-found-by-ai\/\">WordPress<\/a>. Overall, American sites make up more than two in five of the outdated sites in 20i&#8217;s global sample of over 44 million.<\/p>\n<p dir=\"ltr\">Why it matters comes down to breaches. 20i says software vulnerabilities cause almost one-third of them, or 31 percent. Lloyd Cobb, a director at 20i, pointed out that attackers now work faster with AI, so a site one major version behind can still expose fixes nobody applied and flaws criminals already know how to target.<\/p>\n<p dir=\"ltr\">Cobb doesn&#8217;t tell businesses to install every release the minute it lands, though. Online stores in particular need confidence that an update won&#8217;t break checkout. He suggests a steady routine instead: test updates before they go live, keep backups ready for a rollback, and let automatic updates handle routine fixes where a managed host offers them.<\/p>\n<p dir=\"ltr\">One caveat deserves attention. The study labels every site below 7.1 as outdated, so a fully patched <a href=\"https:\/\/hostingdiscussion.com\/news\/wordpress-governance-cracks-show-as-mullenweg-reverses-committer-decisions-weeks-before-7-0-ships\/\">7.0.4<\/a> site lands in the same bucket as one that hasn&#8217;t changed since 2008. The real number of exposed sites is likely lower than the headline. Even so, the pattern points at habits more than at missing patches, and habits are the part a business can actually fix.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hosting provider 20i scanned more than 18.8 million live WordPress sites in the United States and found that 87.86 percent, roughly 16.59 million, run a version older than WordPress 7.1, the major release that arrived in August 2026. That is a big pile of sites falling behind, especially since WordPress shipped three security releases in [&hellip;]<\/p>\n","protected":false},"author":20624,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[71],"tags":[8214,8213,8212,8211,8210],"class_list":["post-10811","post","type-post","status-publish","format-standard","hentry","category-featured","tag-us-wordpress-sites","tag-website-vulnerability-research","tag-wordpress-7-1","tag-wordpress-security-updates","tag-wordpress-websites"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Nearly 9 in 10 US WordPress sites are running old software - Web Hosting News<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hostingdiscussion.com\/news\/nearly-9-in-10-us-wordpress-sites-are-running-old-software\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Nearly 9 in 10 US WordPress sites are running old software - Web Hosting News\" \/>\n<meta property=\"og:description\" content=\"Hosting provider 20i scanned more than 18.8 million live WordPress sites in the United States and found that 87.86 percent, roughly 16.59 million, run a version older than WordPress 7.1, the major release that arrived in August 2026. That is a big pile of sites falling behind, especially since WordPress shipped three security releases in [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hostingdiscussion.com\/news\/nearly-9-in-10-us-wordpress-sites-are-running-old-software\/\" \/>\n<meta property=\"og:site_name\" content=\"Web Hosting News\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-28T15:29:08+00:00\" \/>\n<meta name=\"author\" content=\"Justine Juyad\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Justine Juyad\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/nearly-9-in-10-us-wordpress-sites-are-running-old-software\/\",\"url\":\"https:\/\/hostingdiscussion.com\/news\/nearly-9-in-10-us-wordpress-sites-are-running-old-software\/\",\"name\":\"Nearly 9 in 10 US WordPress sites are running old software - Web Hosting News\",\"isPartOf\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#website\"},\"datePublished\":\"2026-09-28T15:29:08+00:00\",\"dateModified\":\"2026-09-28T15:29:08+00:00\",\"author\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3\"},\"breadcrumb\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/nearly-9-in-10-us-wordpress-sites-are-running-old-software\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/hostingdiscussion.com\/news\/nearly-9-in-10-us-wordpress-sites-are-running-old-software\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/nearly-9-in-10-us-wordpress-sites-are-running-old-software\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/hostingdiscussion.com\/news\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Nearly 9 in 10 US WordPress sites are running old software\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#website\",\"url\":\"https:\/\/hostingdiscussion.com\/news\/\",\"name\":\"Web Hosting News\",\"description\":\"Cloud and web hosting industry daily news\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/hostingdiscussion.com\/news\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3\",\"name\":\"Justine Juyad\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g\",\"caption\":\"Justine Juyad\"},\"description\":\"HostingDiscussion.com senior reporter\",\"sameAs\":[\"https:\/\/hostingdiscussion.com\/news\/\"],\"url\":\"https:\/\/hostingdiscussion.com\/news\/author\/justine-juyad\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Nearly 9 in 10 US WordPress sites are running old software - Web Hosting News","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hostingdiscussion.com\/news\/nearly-9-in-10-us-wordpress-sites-are-running-old-software\/","og_locale":"en_US","og_type":"article","og_title":"Nearly 9 in 10 US WordPress sites are running old software - Web Hosting News","og_description":"Hosting provider 20i scanned more than 18.8 million live WordPress sites in the United States and found that 87.86 percent, roughly 16.59 million, run a version older than WordPress 7.1, the major release that arrived in August 2026. That is a big pile of sites falling behind, especially since WordPress shipped three security releases in [&hellip;]","og_url":"https:\/\/hostingdiscussion.com\/news\/nearly-9-in-10-us-wordpress-sites-are-running-old-software\/","og_site_name":"Web Hosting News","article_published_time":"2026-09-28T15:29:08+00:00","author":"Justine Juyad","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Justine Juyad","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/hostingdiscussion.com\/news\/nearly-9-in-10-us-wordpress-sites-are-running-old-software\/","url":"https:\/\/hostingdiscussion.com\/news\/nearly-9-in-10-us-wordpress-sites-are-running-old-software\/","name":"Nearly 9 in 10 US WordPress sites are running old software - Web Hosting News","isPartOf":{"@id":"https:\/\/hostingdiscussion.com\/news\/#website"},"datePublished":"2026-09-28T15:29:08+00:00","dateModified":"2026-09-28T15:29:08+00:00","author":{"@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3"},"breadcrumb":{"@id":"https:\/\/hostingdiscussion.com\/news\/nearly-9-in-10-us-wordpress-sites-are-running-old-software\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hostingdiscussion.com\/news\/nearly-9-in-10-us-wordpress-sites-are-running-old-software\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/hostingdiscussion.com\/news\/nearly-9-in-10-us-wordpress-sites-are-running-old-software\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/hostingdiscussion.com\/news\/"},{"@type":"ListItem","position":2,"name":"Nearly 9 in 10 US WordPress sites are running old software"}]},{"@type":"WebSite","@id":"https:\/\/hostingdiscussion.com\/news\/#website","url":"https:\/\/hostingdiscussion.com\/news\/","name":"Web Hosting News","description":"Cloud and web hosting industry daily news","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hostingdiscussion.com\/news\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3","name":"Justine Juyad","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g","caption":"Justine Juyad"},"description":"HostingDiscussion.com senior reporter","sameAs":["https:\/\/hostingdiscussion.com\/news\/"],"url":"https:\/\/hostingdiscussion.com\/news\/author\/justine-juyad\/"}]}},"views":109,"_links":{"self":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/10811","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/users\/20624"}],"replies":[{"embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/comments?post=10811"}],"version-history":[{"count":1,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/10811\/revisions"}],"predecessor-version":[{"id":10812,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/10811\/revisions\/10812"}],"wp:attachment":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/media?parent=10811"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/categories?post=10811"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/tags?post=10811"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}