Exposure by technology
We cross how widely each technology is used on the web (HTTP Archive) with the risk of its vulnerabilities. The higher the score, the greater the real-world exposure.
1WooCommerce553,677 sites use· 2,653 CVEs· 207 critical3,0832WordPress2,714,694 sites use· 2,702 CVEs4 exploited· 208 critical3,0103Joomla84,613 sites use· 560 CVEs6 exploited· 108 critical1,6164Windows Server221,496 sites use· 755 CVEs32 exploited· 3 critical1,4295PHP4,221,648 sites use· 1,223 CVEs4 exploited· 55 critical1,1376Elementor899,310 sites use· 1,777 CVEs· 53 critical1,0457Apache HTTP Server1,465,263 sites use· 204 CVEs6 exploited· 24 critical6338OpenSSL62,289 sites use· 247 CVEs· 43 critical5539Apache Tomcat13,840 sites use· 174 CVEs6 exploited· 34 critical50110Magento32,588 sites use· 361 CVEs4 exploited· 39 critical49911Nginx2,081,367 sites use· 186 CVEs1 exploited· 18 critical40512GitLab532 sites use· 1,178 CVEs6 exploited· 31 critical40213XWiki34 sites use· 250 CVEs1 exploited· 122 critical32714Drupal94,414 sites use· 104 CVEs4 exploited· 9 critical27915Grav718 sites use· 162 CVEs· 18 critical19916Oracle WebLogic Server2,027 sites use· 59 CVEs· 26 critical17617Liferay6,239 sites use· 210 CVEs· 23 critical15218Ghost2,997 sites use· 96 CVEs· 7 critical14919FreeBSD2,406 sites use· 216 CVEs· 10 critical14620RoundCube1,392 sites use· 59 CVEs3 exploited· 1 critical14221Concrete CMS4,020 sites use· 139 CVEs· 1 critical14222Gitea47 sites use· 111 CVEs1 exploited· 10 critical13523jQuery5,581,844 sites use· 68 CVEs1 exploited13324ERPNext356 sites use· 100 CVEs· 4 critical13125Sentry553,330 sites use· 29 CVEs1 exploited· 6 critical12926Plesk261,530 sites use· 16 CVEs· 10 critical12227Laravel98,968 sites use· 64 CVEs· 4 critical11828Express77,324 sites use· 20 CVEs1 exploited· 5 critical11629Moodle12,059 sites use· 313 CVEs· 8 critical11430Node.js620,019 sites use· 163 CVEs· 4 critical11331The Events Calendar79,381 sites use· 42 CVEs· 7 critical10932Apache Traffic Server2,930 sites use· 118 CVEs· 11 critical10333Elasticsearch10,700 sites use· 91 CVEs9834Bold Themes3,246 sites use· 63 CVEs· 12 critical9735Erlang2,076 sites use· 67 CVEs1 exploited· 3 critical9736Adobe Experience Manager19,394 sites use· 932 CVEs1 exploited· 4 critical9037PrestaShop49,565 sites use· 63 CVEs· 9 critical9038GiveWP6,151 sites use· 49 CVEs· 5 critical8939Discourse2,279 sites use· 290 CVEs· 3 critical8740cPanel1,117 sites use· 20 CVEs1 exploited· 7 critical8141Salesforce102,981 sites use· 34 CVEs· 8 critical8142Redis62,913 sites use· 59 CVEs1 exploited· 2 critical7943React Router203,294 sites use· 23 CVEs1 exploited· 2 critical7844Vite108,197 sites use· 28 CVEs1 exploited7845PostgreSQL10,597 sites use· 111 CVEs7746Frappe554 sites use· 96 CVEs· 4 critical7447Cloudflare4,083,858 sites use· 66 CVEs· 3 critical7448Kibana5 sites use· 197 CVEs1 exploited· 8 critical7249Apache Wicket1,926 sites use· 41 CVEs· 2 critical7050Litespeed Cache384,236 sites use· 29 CVEs· 2 critical7051Apache APISIX1,936 sites use· 34 CVEs1 exploited· 2 critical6852Next.js404,724 sites use· 59 CVEs· 2 critical6853W3 Total Cache79,985 sites use· 22 CVEs· 4 critical6754Gravity Forms96,258 sites use· 23 CVEs· 4 critical6655Okta6,770 sites use· 38 CVEs· 1 critical6656Artifactory3 sites use· 54 CVEs4 exploited· 5 critical6657Symfony10,960 sites use· 73 CVEs· 1 critical6658Envoy103,324 sites use· 105 CVEs· 1 critical6559SPIP1,725 sites use· 27 CVEs· 8 critical6460Grafana131 sites use· 57 CVEs2 exploited· 6 critical6361XenForo5,175 sites use· 25 CVEs· 4 critical6362GLPI107 sites use· 183 CVEs· 10 critical6263Riot2,319 sites use· 28 CVEs· 7 critical5964Hugo6,148 sites use· 25 CVEs· 3 critical5865Bootstrap2,235,330 sites use· 64 CVEs· 1 critical5866CakePHP8,049 sites use· 11 CVEs· 5 critical5767Django26,142 sites use· 50 CVEs· 2 critical5568Sitecore5,927 sites use· 12 CVEs1 exploited· 2 critical5469RankMath SEO350,121 sites use· 20 CVEs5370ProfilePress13,249 sites use· 15 CVEs· 5 critical5371Livewire22,403 sites use· 3 CVEs1 exploited· 1 critical5372TeamCity1 sites use· 191 CVEs4 exploited· 6 critical5373Axios105,117 sites use· 52 CVEs5274Angular118,500 sites use· 45 CVEs5275Redux Framework76,458 sites use· 17 CVEs5176Yii19,336 sites use· 4 CVEs1 exploited· 1 critical5177Astro49,450 sites use· 45 CVEs· 1 critical4878Highcharts12,809 sites use· 17 CVEs4779OpenCart20,579 sites use· 28 CVEs· 3 critical4780Mattermost1 sites use· 480 CVEs· 6 critical4781Datadog87,057 sites use· 29 CVEs· 1 critical4782Rocket.Chat173 sites use· 60 CVEs· 9 critical4783Essential Addons for Elementor53,645 sites use· 24 CVEs· 1 critical4684Ninja Forms11,759 sites use· 32 CVEs· 2 critical4585MyBB590 sites use· 27 CVEs· 2 critical4486Jenkins14 sites use· 174 CVEs1 exploited· 3 critical4487Auth0953 sites use· 40 CVEs· 4 critical4488WP-Statistics2,457 sites use· 22 CVEs· 5 critical4389NextAuth.js17,922 sites use· 14 CVEs· 3 critical4290Blocksy Companion14,399 sites use· 17 CVEs· 3 critical4291Pimcore2,349 sites use· 46 CVEs· 3 critical4092SiteGround109,936 sites use· 12 CVEs· 2 critical3993Prebid137,498 sites use· 4 CVEs· 3 critical3894History2,514 sites use· 1 CVEs1 exploited· 1 critical3895Bitrix2415,786 sites use· 8 CVEs· 4 critical3796EasyDigitalDownloads2,612 sites use· 19 CVEs· 3 critical3697Contao9,368 sites use· 32 CVEs· 1 critical3698Quasar5,353 sites use· 10 CVEs· 1 critical3699Divi153,381 sites use· 12 CVEs35100EWWW Image Optimizer55,068 sites use· 11 CVEs34101Plone1,992 sites use· 12 CVEs· 3 critical34102Bold Page Builder2,278 sites use· 46 CVEs33103git37 sites use· 41 CVEs1 exploited· 4 critical33104Zabbix6 sites use· 87 CVEs· 9 critical32105Dropbox17,419 sites use· 9 CVEs· 1 critical32106Nexcess88 sites use· 28 CVEs· 2 critical32107Oracle HTTP Server286 sites use· 13 CVEs· 5 critical32108Java261,804 sites use· 182 CVEs30109Download Monitor12,148 sites use· 23 CVEs· 1 critical30110Perl7,116 sites use· 11 CVEs· 2 critical30111NodeBB150 sites use· 14 CVEs· 6 critical29112Warp20 sites use· 33 CVEs1 exploited· 4 critical29113Apollo28,130 sites use· 13 CVEs· 2 critical28114Thelia181 sites use· 17 CVEs27115Mautic6,263 sites use· 36 CVEs· 2 critical27116Koha889 sites use· 20 CVEs· 1 critical27117MetaSlider40,623 sites use· 7 CVEs· 2 critical27118Gogs3 sites use· 49 CVEs1 exploited· 7 critical27119Akamai28,971 sites use· 15 CVEs26120Fedora626 sites use· 83 CVEs· 2 critical26