Most WordPress Vulnerabilities Are in Plugins. A Static Site Runs None.
Patchstack counted 11,334 new WordPress vulnerabilities in 2025. Six were in WordPress itself. The rest came with the plugins and themes people add.
What a Static Site Is, and When You Need Something Else
Most websites are pages people read. Those can be built once and sent as files, and that covers more sites than you might expect.
