Why Are WordPress Sites Still Running EOL PHP?

This report analyzes the security posture of publicly visible WordPress sites, highlighting widespread use of outdated PHP and plugins, the resulting vulnerability surface, and an active defacement campaign attributed to ‘MR.GREEN’ that has impacted hundreds of sites; it documents common TTPs (xmlrpc.php abuse, exposed SSH, plugin/backdoor supply-chain risks), provides telemetry-based counts and examples, and offers remediation guidance for patching and configuration hygiene.