A new Singapore Study has found that four in five websites run by local businesses carry at least one detectable WordPress vulnerabilities. The Singapore WordPress Website Cybersecurity Study, released by Equinet Academy on August 31, 2026, in partnership with Cutlazz Cyber Consulting, examined 102 publicly accessible WordPress sites operated by Singapore-based businesses.  

Using passive, automated scanning between April and August 2026, researchers found that 80.4% of the sites had at least one identifiable vulnerability, and 33.3% fell into the High or Critical Risk categories. Seven sites were rated Critical Risk. 

Across the sample, 1,853 confirmed vulnerabilities were matched to ...