WordPress

WordPress powers around 43% of all websites on the internet. That number matters for practical reasons: every hosting provider has a one-click installer, every developer has worked with it, and almost every common website requirement already has a plugin built for it.

The self-hosted version (wordpress.org, not wordpress.com) gives you the full platform with no monthly fee beyond your hosting costs. A block-based editor, 60,000+ plugins covering everything from WooCommerce to membership sites to booking systems, and 10,000+ themes. You own the files and the database outright.

The maintenance reality is worth being clear about. WordPress is the most targeted CMS by attackers precisely because it is the most common. Core updates, plugin updates, and theme updates need regular attention. Neglect them and you create vulnerabilities. Running WordPress means accepting ongoing maintenance as a standing cost, even if a well-managed install only takes 15 minutes a month to keep current.

Plugin quality varies significantly. The 60,000-plugin ecosystem exists because anyone can publish one. Finding a well-maintained plugin for a niche requirement sometimes means auditing several options before you trust one with your site.

One governance note worth knowing: in 2024, a public dispute between Automattic and WP Engine divided the community and raised questions about how the open-source project is stewarded. The software remains GPL-licensed and freely available, but the episode is part of the recent history.

For building almost any kind of website with full data ownership and no platform subscription, this is the most practical starting point available.

WordPress: Pros & Cons