Sucuri 2023: 39.1% of CMS apps outdated at point of infection (down from 50.58% in 2022)

Quote (Sucuri 2023 Hacked Website & Malware Threat Report, June 12, 2024):

"39.1% of all CMS applications were outdated at the point of infection."

Companion findings (same report):

• 13.97% of compromised sites had at least one vulnerable plugin or theme present
• 49.21% had at least one backdoor at remediation
• 42.22% had SEO spam (Japanese SEO spam .htaccess: 10.07% — the most common single infection)
• 55.2% of infected databases had malicious WordPress admin users

Year-over-year context: Sucuri's 2022 report (April 2023) reported 50.58% of compromised CMS apps were outdated. The 39.1% → 50.58% improvement reflects real progress, but outdated CMS is still the most common environment for a compromise.

Source: https://blog.sucuri.net/2024/06/2023-hacked-website-malware-threat-report.html

Confidence: Verified.