4 in 5 Singapore Business Websites Have WordPress Vulnerabilities

The Equinet Academy study of 102 Singapore-based WordPress sites found that 80.4% had at least one detectable vulnerability (1,853 CVEs matched), with 33.3% in High/Critical categories and seven sites rated Critical; common causes included outdated WordPress core and plugins, exposed XML-RPC and wp-cron endpoints, and visible login paths. The passive automated scan (April–August 2026) emphasizes maintenance and configuration failures rather than active exploitation and recommends routine patching, disabling unused endpoints, enforcing HTTPS, and quarterly security scans to reduce compliance and operational risk.