These WordPress Statistics Show Just How Huge the Platform Is


Jan 20,2023

DataProt is supported by its audience. When you buy through links on our site, we may earn a commission. This, however, does not influence the evaluations in our reviews. Learn More.

If you ever tried setting up a website or blog, chances are you’ve come across WordPress. This is the simplest and most popular content management system on the planet. Powering more than a quarter of all websites on the internet, the platform’s impact is extensive. But with this great power comes great responsibility. And danger: WordPress also constitutes the single most attractive target for cybercriminals.

That’s why our team at DataProt assembled a list of the latest WordPress statistics, regarding both th'e platform’s overall performance and the most common security issues that users are likely to encounter.

Key WordPress Statistics
WordPress statistics from 2019 show that the platform powers 34% of the internet.
WordPress websites account for around 60% of the global CMS market share.
There are more than 19 million websites currently operating on WordPress.
WordPress hack statistics reveal that around 73% of installations are vulnerable to cyberattacks.
Site statistics from WordPress show that more than 500 websites are built every day on WordPress.

How Big is the Platform?

WordPress statistics from 2019 show that the platform is responsible for powering 34% of the internet.


Some of the most interesting websites are running on WordPress. The long list includes The New York Post, TED, New York Observer, CNN, USA Today,, National Post, Spotify, and NBC. Whether you are working on a blog or a company website, chances are pretty good that you are also running on WordPress.

WordPress websites account for around 60% of the global CMS market.


For the last seven years, WordPress has been crowned king among content management systems. The platform dominates website use statistics and shares the top-five list with a few other heavy hitters, including Drupal, CPanel, Google Search Appliance and Joomla.

There are more than 19 million websites currently operating on WordPress.


WordPress statistics underscore the platform's status as the best in the game. With its numbers constantly climbing, WordPress can be described as the backbone or workhorse of today’s internet. It would be hard to imagine many of today’s high-profile media outlets, online retailers, commercial businesses and blogs without the platform.

Site statistics from WordPress show that more than 500 websites are built every day on WordPress.


When the numbers are broken down, daily usage stats reveal that as many as 500 websites are generated within the top 10 million websites by WordPress alone. It is safe to assume that these figures will continue to rise with the site maintaining its status as the fastest growing CMS.

According to WordPress site stats,  a major new version of the website is released every 152 days.


The highest number of WordPress downloads are recorded on Wednesdays. Fridays are the least popular days for downloading a WordPress kit. Although 22% of all users tend to keep up with all updates, you can still operate older versions of the platform.

WordPress has over 450,000 searches per month in the US.

(Torque Magazine)

A look at global WordPress visitor statistics reveals a far higher figure. It is estimated that around 2.7 million monthly searches are conducted on this keyword alone. This is not counting searches like “WordPress templates”, “WordPress plugins” or the misspelled “Word Press” and “WordPresss” versions. If we combine all the WordPress-related terms, abbreviations and misspellings, we get a figure ranging from 10 million to 100 million global searches every month.

The WordPress platform supports more than 54,000 plugins.


The most popular CMS constantly adds more plugins and improves its client’s UI. The company has seen more than 1.25 billion plugin downloads. Nineteen of those have surpassed the 1 million installation milestone.

The list of the most popular plugins includes useful tools like Hello Dolly, W3 Total Cache, Contact Form 7, Really Simple CAPTCHA, All in One SEO Pack, Google Analytics by Yoast, Google XML Sitemaps, WordPress Importer, Regenerate Thumbnails, WooCommerce, WP-PageNavi, WP Super Cache, Jetpack, TinyMCE Advanced, NextGEN Gallery, Wordfence Security, Yoast SEO, Advanced Custom Fields and Akismet.

WordPress 5.3 surpassed 27 million downloads.


The number of downloads jumps each second. So, feel free to check the website’s download counter, and see for yourself how fast it can grow. Introduced in November 2019, the current WordPress version was dubbed “Kirk” after the late jazz musician Rahsaan Roland Kirk. Since then, it has launched a wave of updates from millions of users across the globe. Boasting such high download numbers, the company is unlikely to worry about a decline in popularity any time soon.


Yoast has been at the forefront of search engine optimization since 2010. The plugin pioneered techniques that have since become widely and elevated millions of websites by helping them rank higher on SERPs. With 80 staff members, Yoast is one of the most popular WP plugins. It provides coherent readability and SEO analysis for websites, increasing its visibility and competitiveness.

Statistics on WordPress show developers can make a living off the platform.


A survey conducted during a State of the Word conference address found that 25% of the participants make their living from WordPress. According to the survey, 90% of those who use WordPress tend to build more than one site and spend less than 200 hours on each.

(Pingdom Royal)

We’ve already established how popular this particular CMS is among internet users around the globe. Holding a major share of overall internet traffic, the company has a reputation for providing the best platform for the web’s top 100 blogs, including TechCrunch, Reuters Blog, and a number of other interesting websites.

WordPress visitor tracking shows that Facebook and WP have the same number of monthly unique visitors in the US.


However, WordPress employs 25 times fewer people than the social media giant. It is admirable to see a staff of 932 employees serve such a high number of users.

Cybersecurity on WordPress Statistics

36.7% of WordPress sites that get hacked weren’t up-to-date.


The figure represents a steep decline from 2014 when a whopping 86% of outdated websites were exposed to cyberattacks. With 98% of the CMS’s vulnerabilities related to plugins, it has proven imperative to keep your website up-to-date while relying on WP security teams to keep you safe.

WordPress hack statistics show that about 73% of installations are vulnerable to cyberattacks.

(Sucuri Security)

WordPress is notorious for being vulnerable to hackers and malicious software. The percentage of infected installation packages highlights the platform’s appealing record with cybercrimes. A 2017 survey based on 42,106 WP websites showed that at least 30,823 of them had exploitable vulnerabilities. Although the company is quick to address these issues when they appear, it is practically impossible to respond to all the threats.

WordPress security stats provided by Sucuri show that 90% of their WordPress using customers requested malware cleanup in 2018, compared to just 4% of Joomla and Magento users.

(Sucuri Security)

The Sucuri Security blog cites WordPress statistics from 2018 that solidify the platform’s status as the most targeted CMS on the web. Websites like Magento and Joomla are far behind with just over 4% of its users requesting malware cleanup. Sucuri analysis shows that malware is usually picked up due to improper deployment, extensible component vulnerabilities, configuration issues as well as a general lack of maintenance. All of the listed issues have nothing to do with the core of the CMS application.

The top three plugins that hackers love breaking into are TimThumb, Revslider, and Gravity Forms.

(Sucuri Security)

WordPress plugins are infamous for being targeted by hackers and malicious software. TimThumb, Revslider and Gravity Forms are reportedly the most frequently-hacked plugins. These three aggregate more than 1% of the total number of infections, but there are many others on the list of vulnerable plugins.

According to one study, 30.95% of Alexa’s top 1 million websites run the vulnerable WordPress Version 3.6.

(WP White Security)

People are generally not too fond of updates. And when you’re dealing with WordPress, updates can be a constant nuisance. But the stats show that WordPress is still the most popular CMS platform on the planet. As such, it is often targeted by malicious software and hackers. Older versions of the platform are more likely to fall victim to cyberattacks. Therefore, if you’re using WordPress, the company insists you update your website, in order to avoid such unpleasantries.

Wordfence reports up to 90,000 attacks on WordPress sites every minute.


WordPress security plugin, Wordfence, recorded 3,587,357,094 blocked attacks in a single 30-day period. Meanwhile, 67,213 malicious IPs were blacklisted during the same time period. Wordfence’s more than 100 million downloads speak volumes about the degree of cyberattacks, which are witnessing a constant rise.

WordPress user statistics show that 8% of WordPress websites get hacked due to weak passwords.


Strong passwords make up half of your personal cybersecurity. On the other hand, 39% of WP users experience vulnerabilities related to the cross-site scripting (XSS) issues. Another 37% of cyberattacks are the result of vulnerabilities from WordPress core files, and 11% are caused by WP themes.

WordPress analytics say the Akismet plugin managed to repel as many as 100 billion spam comments in 2013.

(Automattic, WordPress)

Akismet is WordPress’ favorite plugin when it comes to blocking spam comments. If you’ve ever operated a WP site or any other website, for that matter, you know how pesky spam content can be, not to mention malicious. Luckily, Akismet’s perfect record managed to elevate the experience of running a website by excluding all the nasty spam comments that can affect your website’s reputation as well as its functionality. The latest version of the plugin, Akismet 4.1.3, has already reached more than 5 million downloads.

In 2017, 4000 WordPress websites got infected with malware coming from a fake SEO plugin.

(SiteLock )

Back in 2017, thousands of WordPress web users were affected by one of the more famous infections. The SEO craze left room for hackers to forge WordPress’ legitimate search engine optimization plugin. The malicious file proved hard to detect because at first glance it appeared to include WordPress references  to a legitimate plugin database and even documentation explaining how the plugin works.

The WordPress Community

The website supports 160 different languages.


However, only 72 languages are fully operational. WordPress Poyglots is working tirelessly on developing translation algorithms and adding more of the world’s languages to the platform. The process of translating WordPress software into another language is called Internationalization and localization. The Polyglots team makes sure that WordPress core, plugins, and themes are translated, adapting the software to technical requirements of local users from all over the globe.

WordPress content is published in more than 120 languages


Thanks to Polyglots, WordPress posts can easily be translated into a different language. The fact that WordPress has such a dedicated team localizing and translating the CMS is what sets the company apart of numerous other platforms, focused only on providing their customers with English-based websites. According to CMS usage stats, the 11 most popular languages used in WordPress apart from English are: Chinese, Portugese, Spanish, Arabic, French, Urdu, Russian, Bengali, German, and Japanese.

There are 70 contributing authors to who made around 4,969 commits.


The company’s success lies in its constant development. Since the platform’s basic package is marketed as free for download, the number of high-profile contributors is constantly rising. The platform has 70 contributing authors who have written more than 430,000 lines of WordPress code.

WordPress has 1,069 Wordcamps located in 77 cities across the world.

(WordCamp Central)

First held in San Francisco in 2006, WordCamps represent locally-organized conferences sponsored by Automattic, Inc. for the purpose of discussing everything related to WordPress. Since the platform is free and open-source, it relies on a strong community of contributors who take part in developing a WordPress site to service more than 75 million sites on the web. Holding events in 66 countries across the globe, WordCamps offers support for blogging newbies as well as to professional WP developers, consultants, and others. The program includes scheduled lectures as well as less formal sessions and other activities.

WordPress usage statistics show that 71% of all WP blogs are in English


Spanish is a distant second with 5.1% of the posts. The stats illustrate the dominance of the English language on the internet. But WP claims that the future is bright for non-English speaking bloggers. It points to the platform’s continuing efforts to broaden the scope of languages being used by relying on a team of experts and open-source contributors. The third and fourth most commonly used languages are Indonesian (2.4%), and Portuguese (2.3%).

WordPress blogs received 575 million comments in September 2019, according to the website’s statistics


The WordPress community appears to be very fond of discussions with comments numbering  100 million in March 2019. The peak figure was recorded in September 2019 while November registered a noticeable decline with around 166 million comments posted. The aforementioned figures do not include spam posts, which number over a billion.

WordPress statistics reveal that every day, about 70 million new posts and 77 million new comments get added on their websites across the entire web.


The figures add up to a monthly readership of around 409 million people. An average blog post contains around 1150 words, and the average time spent on each post is around 16 seconds. Blogs have become an inseparable part of every website’s lifespan. Companies that include a blog related to their business are 13 times more likely to generate a good return on their investments.

You can track the activity of all the WordPress sites in the world


Since the CMS offers an elaborate statistics analysis system, it also enables you to get an overview of all the activity on its sites across the globe. Judging by the stats, one thing remains clear - the sun never sets on the WordPress empire. From Australia to the US, and the southernmost tip of Africa, WordPress statistics dominate the charts.

How many websites use WordPress?

There are an estimated 75,000,000 websites running the WordPress CMS. If we take into consideration that the internet consists of approximately 172 million websites, WordPress market share is around 34%. As much as 37,500,000 of those are hosted on the WordPress shared hosting installation.

Is WordPress still popular?

WordPress is used by some of the most popular websites on the entire web. For the last 14 years, Automattic’s CMS is hailed as the pioneer, introducing innovation and attracting millions of users. Since its initial release in 2003, WordPress managed to take around 34% of all websites currently existing online.

How many WordPress plugins are there?

There are over 50,000 plugins for WordPress, and the number keeps growing each day. Do you need all of them? Absolutely not. However, statistics related to WordPress show that plugins like Akismet and Yoast are a must-have when it comes to developing a blog or a business website. Here’s a list of WP’s most used plugins: Hello Dolly, W3 Total Cache, Contact Form 7, Really Simple CAPTCHA, All in One SEO Pack, Google Analytics by Yoast, Google XML Sitemaps, WordPress Importer, Regenerate Thumbnails, WooCommerce, WP-PageNavi, WP Super Cache, Jetpack, TinyMCE Advanced, NextGEN Gallery, Wordfence Security, Yoast SEO, Advanced Custom Fields and Akismet.

Does WordPress tell you who visited your blog?

The Google Analytics WordPress plugin is a free tool from Google that enables you to analyze the blog’s traffic as well how visitors react to the content displayed on your website.

Is WordPress owned by Google?

No. (WordPress) serves as a blogging platform, owned and hosted online by Automattic Inc. The interesting thing about WordPress is that the platform is an open source, meaning the source code is available for anyone who wants to study, improve, redistribute, or change it in any way.

How long will it take to learn WordPress?

According to statistics on WordPress, you need 6 months to a year to become an entry-level developer. This is 6 to 12 months of steady, active learning — a minimum of 10 to 20 hours per week of active WordPress coding.

How many hours does it take to build a WordPress website?

Official site statistics from WordPress suggest that building complex websites consumes around 300 to 500 hours. On the other hand, the time spent for developing a WP website depends on your needs and requirements. While it doesn’t take much understanding to build a basic version of the website, the task becomes more demanding as you go along.

There are no comments yet
Leave your comment

Your email address will not be published.*