Piperic
Security Report
PricingToplistsBrowse free →
🛡️ The WordPress Security Report · July 2026

🇯🇵 54.9% of Japan's WordPress sites run a known-vulnerable component

Of 3,037 Japan WordPress sites where we could read a component version, 1,667 (54.9%) run at least one plugin or theme in a version with a publicly known vulnerability. This measures patch hygiene — not that a site is exploitable.

Analysis of live, content-validated websites · vulnerability data from Wordfence Intelligence · snapshot 2026-07-25 · by Piperic

Share:XLinkedIn

54.9%
run a known-vulnerable component
2.4%
run a critical (CVSS 9+) flaw
#29
safest-web rank
of 37 countries (lower = more up-to-date)

Where Japan stands in the world

Share of measured WordPress sites running a known-vulnerable component — lower = more up-to-date. Japan ranks #29 of 37 countries.

🇻🇳 Vietnam83.2%🇮🇱 Israel75.8%🇧🇷 Brazil72.0%🇬🇷 Greece71.5%🇸🇰 Slovakia70.7%🇨🇱 Chile69.2%🇷🇴 Romania68.6%🇦🇷 Argentina67.5%🇯🇵 Japan54.9%

Neighbours shown for context. Full ranking in the data download.

How Japan compares to the world

Japan's WordPress web measured against the global average — and its exposure to an end-of-life front-end library that stopped receiving security fixes in 2016.

54.9%
of Japan's sites vulnerable
58.8%
global average
13.2%
on end-of-life jQuery 1.x

The most common vulnerable components in Japan

Share of measured Japan WordPress sites running each plugin or theme in a version with a known vulnerability.

Contact Form 729.9%Smash Balloon Instagram Feed5.04%Vk All In One Expansion Unit4.41%Lightning3.0%Jetpack2.63%Tablepress2.4%Whats New Genarator2.24%Ml Slider2.14%All In One Seo Pack1.71%Siteorigin Panels1.15%Xo Event Calendar1.12%Elementor Header & Footer1.02%Wp Jquery Lightbox0.95%Astra (theme)0.95%Elementor Pro0.89%

The most-used plugins — and how often they're outdated

Among Japan sites that run each of these popular components, the share on a version with a known vulnerability. Some stay current; page-builders and sliders lag.

Contact Form 754%Wp Pagenavi0%Vk All In One Expansion Unit54%Lightning41%Smash Balloon Instagram Feed70%Easy Fancybox7%Vk Blocks4%Ml Slider51%Elementor6%All In One Seo Pack41%Contact Form 7 Add Confirm0%Jetpack75%Swell0%Tablepress74%Cocoon Master0%

How severe are the exposures?

Of Japan sites running a vulnerable component, the worst-case severity (CVSS) present.

Critical (CVSS 9.0–10)4.3%High (7.0–8.9)42.9%Medium (4.0–6.9)52.8%

Check your own website

Free, no signup — see what our index knows about any site:

For journalists — press kit

“The headline vulnerabilities make the news; the quiet reality is that most of Japan's WordPress web runs a component with a long-known, unpatched flaw — usually a premium plugin bundled into a theme that no one ever updates,”
— said Attila Rácz-Akácosi, founder of Piperic.

How to cite: “According to Piperic's WordPress Security Report (2026-07-25), 54.9% of measured Japan WordPress sites run a component with a known vulnerability…” — link to this page.

Download the country dataset (JSON) Global rankings dataset

Methodology

Sample: measured Japan WordPress sites (ccTLD-based assignment) where at least one plugin/theme version was readable from the homepage. Plugin/theme versions are cross-referenced against the Wordfence Intelligence vulnerability database (CVE-anchored). This measures update hygiene — running a version for which a vulnerability was disclosed — not exploitability. Homepage-only detection sees front-end components, not back-end plugins. All figures are aggregate; no individual site is identified. Snapshot 2026-07-25 (frozen). Vulnerability data © Wordfence Intelligence, MITRE where applicable.

Press contact: press@piperic.com · Data: Piperic Business Intelligence

Every number on this page is reproducible from the public dataset above.

Country reports

🌍 Worldwide🇩🇪 Germany🇳🇱 Netherlands🇬🇧 United Kingdom🇫🇷 France🇷🇺 Russia🇦🇺 Australia🇧🇷 Brazil🇨🇭 Switzerland🇯🇵 Japan🇵🇱 Poland🇸🇪 Sweden🇨🇦 Canada🇪🇺 EU🇮🇹 Italy🇧🇪 Belgium🇪🇸 Spain🇨🇿 Czechia🇦🇹 Austria🇸🇰 Slovakia🇩🇰 Denmark🇮🇳 India🇨🇴 Colombia🇳🇴 Norway🇬🇷 Greece🇭🇺 Hungary🇫🇮 Finland🇲🇽 Mexico🇪🇪 Estonia🇳🇿 New Zealand🇿🇦 South Africa🇮🇱 Israel🇨🇱 Chile🇻🇳 Vietnam🇮🇪 Ireland🇷🇴 Romania🇦🇷 Argentina