Outdated PHP Versions Leave Majority of WordPress Sites Vulnerable to Attacks A recent study has uncovered a critical security gap in the WordPress ecosystem, revealing that over 70% of publicly accessible WordPress websites are running outdated PHP versions, exposing them to severe cyber threats. With WordPress powering more than 40% of the internet, this neglect of backend infrastructure creates a widespread risk. The analysis, based on data from 316,000 WordPress instances, found that only 30% are using supported, up-to-date PHP versions. The remaining majority rely on end-of-life (EOL) releases, including PHP 7.4, which stopped receiving security patches in November 2022. These outdated versions leave sites vulnerable to remote code execution, authentication bypass, and other known exploits. Attackers are actively exploiting these weaknesses. One notable example is the "Hacked by MR.GREEN" defacement campaign, which has compromised over 900 WordPress sites, replacing legitimate content with malicious messages. Many affected sites exhibited outdated software, exposed configuration files (e.g., *xmlrpc.php*), and weak access controls, making them easy targets for automated scans. The issue is compounded by poor plugin management. While plugins enhance functionality, they also introduce additional attack surfaces. Data shows that millions of WordPress sites use plugins, yet many fail to update them even widely used ones like Yoast SEO. Unpatched plugins with vulnerabilities, such as authentication bypass flaws, provide attackers with entry points. Beyond software updates, misconfigurations further increase risk. Exposed SSH services, weak authentication, and publicly accessible admin panels create exploitable environments. Automated scanning tools allow attackers to identify and target these weaknesses at scale. The challenge of updating PHP is not trivial. Compatibility issues, potential downtime, and fear of breaking functionality often lead administrators to delay updates. However, this short-term convenience comes at the cost of long-term security risks, leaving a vast portion of the internet exposed to opportunistic attacks. The findings underscore the need for proactive patching, proper configuration, and continuous monitoring to mitigate threats.