WordPress security, measured weekly.
Vulnerability trends, plugin adoption, PHP version distribution, and CRA readiness — computed from every audit in the public corpus, updated as new audits land.
WordPress Ecosystem Health Report
Aggregate security and code quality statistics across all publicly audited WordPress plugins and themes.
Last updated: Aug 20, 2026, 01:46 AM
Risk Distribution
How audited plugins and themes are distributed across risk levels.
Weekly Trends
Audit activity and quality trends over the last 12 weeks.
| Week | Audits | Avg Risk | Avg Score | Trend |
|---|---|---|---|---|
| 2026-W32 | 156 | 3.2 | 0 | |
| 2026-W33 | 575 | 3.2 | 0 | |
| 2026-W34 | 269 | 3.2 | 0 |
Audit your plugin and join the leaderboard
Get a comprehensive security, quality, and accessibility audit for your WordPress plugin or theme. Results appear on the public directory and leaderboard.
Start Free AuditFigures are computed from completed, publicly-listed audits in the WP HealthKit corpus. Prevalence percentages are the share of audits with at least one finding in the class. Trend windows are trailing 30/90 days; the sample size is printed on every chart. This is measurement, not modeling — no projections, no estimates beyond the data itself.