Today’s most popular web CMS platforms are WordPress, Joomla and Drupal. Together accounting for 75 percent of the market, it is common for one or more to be included as a standard feature of web hosting services. Their status attests to their popularity and effectiveness, but CMS platforms also have security issues. For example, one provider of WordPress security plugins found that 73 percent of all WordPress installations studied had unpatched vulnerabilities that could be easily detected with a freeware vulnerability scanner. It’s been argued that the figure could be overinflated because thestudy focused on a limited subset of WordPress installations. Nonetheless, cybercriminals quite plainly know that there are large numbers of unpatched installations on the web. That’s why they focus heavily on CMS-based sites.