WordPress Popular Sites Analysis

WORDPRESS USAGE 1.9% WITHIN TOP 100K 1910 sites INTERNET SITES 2.6% 2611 sites 11.2% 11184 sites Apache Major Version 22x WordPress 3.2 has been downloaded 20x 5,062,979 times 13x O 1000 2000 3000 АРАСНЕ 74.6% Exploits for wordpress core and plugins released publicly by month. Microsoft IIS 0.1 2.0% lighttpd 2.0% 60 CORE nginx 3.6% 16.6% other 6.5 PLUGINS 70 litespeed 7.5 O 20 40 60 B0 100 120 "None of these are safe to use, except the latest in the 3.2 series, which is actively mantained." -- wordpress.org 2011-01 FOUND 1 SITE 15 in cz confirmed to be running 1.5!! 2010-99 205 212 2120 version 3.2 2.13 4.6% 2.14 2010-04 223 version 3.1.1 23 2010-02 3.0% 207 22.1 version 3.2.1 23.1 232 285.2 41.2% version 3.1.2 152 4.9% 283 2.7.1 2.8.4 233 265 204 version 3.0.4 version 3.1 3.5% 26.1 2008-10 263 5.5% 202 version 3.0.1 25.1 version 3.1.4 6.3% 285 version 3.1.3 3.1% 9.0% 302 27.1 286 version 2.9.2 107-11 4.2% 2.9.1 303 3.0.5 305 3.1.1 3.0.3 2.8.6 3.14 3.04 292 3.12 30.1 3.13 2004-10 11184 WP SITES HOSTED @ TOP 20 RANKINGS SOFTLAYER MEDIATEMPLE Softlayer includes netblocks owned by The Planet and Softlayer. These will likely include smaller hosts in those GODADDY E WP POWERED RACKSPACE 1. wordpress.com clicksor.com 3. mashable.com 4. techcrunch.com 5. tribalfusion.com BLUEHOST CLOUDFLARE DREAMHOST netblocks. HETZNER 0. matomymedia.com 7. informer.com GOOGLE LIQUIDWEB AMAZON MIDPHASE.COM οVHNET 8. 9. smashingmagazine.com 10. tutsplus.com 11. wired.com 12. xda-developers.com 13. dyn.com 14. zendesk.com 15. seriesyonkis.com 16. webhostingtalk.com 17. perezhilton.com 18. newyork.cbslocal.com 19. searchengineland.com 20. sitepoint.com WIREDTREE LC-CERAMICS WORDPRESS.COM LTDOMAINS WEBNX.COM HOSTMONSTER SPRY.COM 500 1000 1500 2000 Russia Canada Major Versions by Country Chỉna UNITED STATES India 16% 11% 46% GERMANY 126 13% 49% Bråzil FRANCE 27% 19% 10% 42% 61% NETHERLANDS 11% of wordpress installs in the top 100K are hosted in the USA 33% 43% CANADA 16% 16% 19% 46% RUSSIAN FEDERATION 13% 40% SECURING WORDPRESS UNITED KINGDOM 26% 32% BASIC STEPS TO A SECURE WORDPRESS INSTALL SPAIN 226 13% 34% 1. Back It Up -Beready to perform a complete rebuild at anytime. 2. Keep WordPress System up to date 3. Keep all Plugins up to date 4. Beware of untrusted Themes 5. Use strong passwords (a dictionary word with a number is not a strong password!) 6. Keep your password safe! Do not re-use it on other sites. 7. Run working AV on your Windows Machine. Malware collects passwords. 8. The underlying server must be well managed and in a secure state 9. VPS or Dedicated server -Set up server monitoring JAPAN 21% 34% ITALY 12% 35% 35% CHINA 29% 35% BRAZIL 21% 15% 49% 2.x 3.0х 3.1х 3.2х NOT IMPRESSED BY OUR DESIGN SKILLS? THATS OK WE ARE BETTER AT SECURITY. O HACKERTARGET.COM LLC ONLINE SECURITY SCANS Sources: AND TESTING TOOLS 1. Alexa Top 1 M Nl ion (100K extracted) 24th August 2011 2. HackerTarget..com pass ive Scan of Top 100K 25-27th of August 2011 3. HackerTarget.com Web Tech Report hackertarget.com/2011/03/web-tech-2011-report/ 4. WordPress.org Total Downloads of 3.2 17 August 2011 5. explo it-db.org 28th August 2011 * Statistics for Web Servers and WordPress version has been determined from the subsetof sites where this was able to be identified. It is good practice to hide this info