Piperic
Security Report
PricingToplistsBrowse free →
🛡️ The WordPress Security Report · July 2026

🇦🇺 61.1% of Australia's WordPress sites run a known-vulnerable component

Of 3,891 Australia WordPress sites where we could read a component version, 2,377 (61.1%) run at least one plugin or theme in a version with a publicly known vulnerability. This measures patch hygiene — not that a site is exploitable.

Analysis of live, content-validated websites · vulnerability data from Wordfence Intelligence · snapshot 2026-07-25 · by Piperic

Share:XLinkedIn

61.1%
run a known-vulnerable component
7.9%
run a critical (CVSS 9+) flaw
#19
safest-web rank
of 37 countries (lower = more up-to-date)

Where Australia stands in the world

Share of measured WordPress sites running a known-vulnerable component — lower = more up-to-date. Australia ranks #19 of 37 countries.

🇻🇳 Vietnam83.2%🇮🇱 Israel75.8%🇧🇷 Brazil72.0%🇬🇷 Greece71.5%🇸🇰 Slovakia70.7%🇨🇱 Chile69.2%🇷🇴 Romania68.6%🇦🇷 Argentina67.5%🇦🇺 Australia61.1%

Neighbours shown for context. Full ranking in the data download.

How Australia compares to the world

Australia's WordPress web measured against the global average — and its exposure to an end-of-life front-end library that stopped receiving security fixes in 2016.

61.1%
of Australia's sites vulnerable
58.8%
global average
6.0%
on end-of-life jQuery 1.x

The most common vulnerable components in Australia

Share of measured Australia WordPress sites running each plugin or theme in a version with a known vulnerability.

Contact Form 712.03%Slider Revolution10.02%WPBakery Page Builder7.74%Elementor Pro5.65%WooCommerce4.55%Essential Addons for Elementor3.83%Astra (theme)3.75%Elementor Header & Footer3.5%Gravityforms3.44%Smash Balloon Instagram Feed2.88%Elementor2.44%LayerSlider2.18%Wpforms Lite1.7%Hello Elementor1.62%Salient1.54%

The most-used plugins — and how often they're outdated

Among Australia sites that run each of these popular components, the share on a version with a known vulnerability. Some stay current; page-builders and sliders lag.

Contact Form 739%Elementor8%Elementor Pro32%WooCommerce34%Slider Revolution93%Hello Elementor16%WPBakery Page Builder86%Astra (theme)51%Gravityforms56%Smash Balloon Instagram Feed59%Essential Addons for Elementor99%Google Analytics For Wordpress31%Elementor Header & Footer100%Divi (theme)48%Jetpack30%

How severe are the exposures?

Of Australia sites running a vulnerable component, the worst-case severity (CVSS) present.

Critical (CVSS 9.0–10)13.0%High (7.0–8.9)48.1%Medium (4.0–6.9)38.9%

Check your own website

Free, no signup — see what our index knows about any site:

For journalists — press kit

“The headline vulnerabilities make the news; the quiet reality is that most of Australia's WordPress web runs a component with a long-known, unpatched flaw — usually a premium plugin bundled into a theme that no one ever updates,”
— said Attila Rácz-Akácosi, founder of Piperic.

How to cite: “According to Piperic's WordPress Security Report (2026-07-25), 61.1% of measured Australia WordPress sites run a component with a known vulnerability…” — link to this page.

Download the country dataset (JSON) Global rankings dataset

Methodology

Sample: measured Australia WordPress sites (ccTLD-based assignment) where at least one plugin/theme version was readable from the homepage. Plugin/theme versions are cross-referenced against the Wordfence Intelligence vulnerability database (CVE-anchored). This measures update hygiene — running a version for which a vulnerability was disclosed — not exploitability. Homepage-only detection sees front-end components, not back-end plugins. All figures are aggregate; no individual site is identified. Snapshot 2026-07-25 (frozen). Vulnerability data © Wordfence Intelligence, MITRE where applicable.

Press contact: press@piperic.com · Data: Piperic Business Intelligence

Every number on this page is reproducible from the public dataset above.

Country reports

🌍 Worldwide🇩🇪 Germany🇳🇱 Netherlands🇬🇧 United Kingdom🇫🇷 France🇷🇺 Russia🇦🇺 Australia🇧🇷 Brazil🇨🇭 Switzerland🇯🇵 Japan🇵🇱 Poland🇸🇪 Sweden🇨🇦 Canada🇪🇺 EU🇮🇹 Italy🇧🇪 Belgium🇪🇸 Spain🇨🇿 Czechia🇦🇹 Austria🇸🇰 Slovakia🇩🇰 Denmark🇮🇳 India🇨🇴 Colombia🇳🇴 Norway🇬🇷 Greece🇭🇺 Hungary🇫🇮 Finland🇲🇽 Mexico🇪🇪 Estonia🇳🇿 New Zealand🇿🇦 South Africa🇮🇱 Israel🇨🇱 Chile🇻🇳 Vietnam🇮🇪 Ireland🇷🇴 Romania🇦🇷 Argentina