Is WordPress becoming obsolete?

WordPress's market share is falling — and falling faster than it was a year ago. According to W3Techs data, the platform's share of all websites dropped from 43.6% in mid-2025 to 41.9% by late May 2026, and the pace of decline roughly doubled in early 2026. Other trackers put the figure at 41.5% by July 2026 — the first significant drop since 2011.

But here's the catch: the headline number may be misleading.

Two competing explanations dominate the discussion. The first points to Google. Between 2024 and 2026, Google's spam updates deindexed huge volumes of low-quality sites — much of them hosted on WordPress. A 2026 analysis by Originality.ai found over 1,400 sites in a 79,000-site sample were removed for AI-generated content alone. When abandoned spam sites fall out of the measured web, the platform that hosted them loses market share on paper — without a single legitimate business leaving. Supporters of this view note that WordPress's losses went mostly to the "no CMS" category, not to competitors.

The second explanation is governance. The public conflict between Matt Mullenweg and WP Engine eroded trust in the project's leadership, and the share decline began the quarter after those attacks — though analysts are careful to note this is correlation, not proven causation. The fallout was real: 159 Automattic employees left after a buyout offer, and BlackRock cut its Automattic share price estimate by 63.5%.

Meanwhile, the competitive picture shows the drop is genuine, not an artifact of measurement alone:

• Wix gained 0.6 percentage points between May 2025 and May 2026
• Shopify added 0.4 points over the same period
• Squarespace and Webflow each grew modestly, while Duda held steady

So competitors are stable or growing while WordPress shrinks — the decline is real. What's contested is what it means.

For business owners weighing a platform decision, the practical question isn't the headline number. It's whether you want to manage a flexible-but-maintenance-heavy CMS, or hand the work to a managed system. That's the gap a done-for-you platform like AI Business Sites is built around: the site, content, and upkeep handled for you, so the platform debate matters less than the outcome. As one industry analysis puts it, the real question is no longer "which platform has more features?" but "which platform lets me focus on my business instead of managing my website's infrastructure?"

"Obsolete" is a strong word for a platform that still powers the majority of the web's most successful sites. The data tells a more interesting story: decline at the edges, dominance at the core.

Yes, the headline numbers are falling. W3Techs data shows WordPress dropping from 43.6% of all websites in mid-2025 to roughly 41.5–42.6% by mid-2026, with the pace of decline doubling in early 2026, according to Search Engine Journal's analysis. That sounds alarming — until you look at where the losses are actually going.

A three-dataset analysis concluded that most of what WordPress lost didn't go to a competitor at all. It went to sites with no CMS fingerprint — much of it spam, PBNs, and AI content farms swept out of Google's index during the 2024–2026 spam crackdowns. One study of 79,000 sites found over 1,400 deindexed for AI-generated content alone. Meanwhile, search interest in WordPress hit a five-year high in 2026.

The strongest evidence against obsolescence sits at the professional tier. WordPress accounts for 58% of CMS usage among the top 10,000 websites, per HTTP Archive data — while Wix and Shopify are almost absent from that segment. The platform isn't dying; it's consolidating where control and complexity matter most.

And it's adapting. WordPress 7.0 shipped native AI infrastructure — an AI Client, an Abilities API, and an MCP Adapter — positioning it to plug into models from Anthropic, Google, and OpenAI. The 2026 roadmap explicitly targets "AI everywhere, with clear guardrails." That's not the behavior of a fading technology.

The honest reframe is convenience versus control. AI builders win on speed and simplicity; WordPress wins on ecosystem depth, portability, and the ability to handle complex requirements like memberships, integrations, and custom content types, as DreamHost's comparison puts it. For teams with technical expertise, that control is worth the maintenance burden.

For a small business owner, though, the calculus differs. WordPress consistently ranks last on Core Web Vitals in real-world comparisons, and 96% of its vulnerabilities come from plugins — a burden someone has to manage. That's precisely why managed platforms have gained ground: the question is no longer "which platform has more features," but "which one lets me focus on my business instead of my website's infrastructure." It's the same reason we built AI Business Sites as a fully managed system rather than handing owners software to maintain. WordPress isn't obsolete — but for owners who never wanted to be sysadmins, it's asking them to do a job they never signed up for.

For a small business owner, the market share debate is mostly noise. The question that actually matters is simpler: what does WordPress cost you in time, worry, and hidden technical work once the site is live? On that front, the numbers tell a less flattering story.

Security is the sharpest edge. According to security researchers at Patchstack, 96% of WordPress vulnerabilities come from plugins, not the WordPress core itself. And the problem is accelerating: security data shows 11,334 new vulnerabilities were disclosed in 2025 — a 42% increase over the previous year — with 91% found in plugins and themes.

What makes that figure genuinely alarming is the response window. The median time to mass exploitation of a high-impact vulnerability is now just five hours. That means a plugin update landing on a Tuesday afternoon can become an active attack vector before most business owners have even seen the notification.

Then there's performance. In HTTPArchive's real-world comparisons, WordPress consistently ranks last on Core Web Vitals — the speed and experience metrics Google uses to rank pages. Competing platforms now beat it regularly, and the gap shows up in search visibility, not just load times.

For a non-technical owner, this adds up to a recurring list of jobs that have nothing to do with running the business:

• Patching plugins and themes as vulnerabilities are disclosed — weekly, at minimum
• Vetting the ~60,000 free plugins before installing any of them
• Managing updates, backups, and compatibility conflicts between components
• Monitoring site speed and fixing performance regressions as the site grows

This is why the real question has shifted. As one analysis put it, the debate is no longer "which platform has more features" but which platform lets you focus on your business instead of managing your website's infrastructure. Manual WordPress setup alone takes an estimated 15–20 hours, and the upkeep never stops after that.

It's also why fully managed alternatives have gained ground. Platforms like AI Business Sites are built on the premise that maintenance, security, and performance should be someone else's problem — the owner's job is running the business, not babysitting a CMS.

None of this makes WordPress obsolete. It remains a capable, flexible platform. But for a small business owner weighing options in 2026, the honest calculation isn't about market share or community size. It's about whether you want a platform that demands a part-time sysadmin — or one that simply runs.

The real question isn't which platform wins — it's which model of building and running a website fits your life. For a small business owner, there are three practical paths, and each comes with a different bill attached.

The first path is manual WordPress. It offers maximum control, but a typical setup takes 15–20 hours before you write a word of content — and the work doesn't stop at launch. With 11,334 new WordPress vulnerabilities disclosed in 2025 and a median five-hour window before high-impact flaws are exploited in the wild, "set it and forget it" isn't an option. Someone has to own updates, backups, and plugin security forever.

The second path is AI-assisted WordPress, where tools generate a real WordPress site for you. It cuts setup time, but you inherit the same maintenance and security burden — just with a faster start.

The third path is a fully AI-built website platform. Here the trade-off flips: no maintenance, but real risks in what the AI produces. According to Veracode's 2026 research, 45% of AI-generated code introduces OWASP Top 10 security flaws, and a separate study found 88% of vibe-coded apps contained critical vulnerabilities. A site built this way without expert review can become a liability the day it goes live.

So how do you choose? Weigh these factors honestly:

• Your time: 15–20 hours of setup is just the entry fee for a manual build
• Your security exposure: unmanaged plugins or unreviewed AI code both carry risk
• Your appetite for ongoing work: updates, content, and monitoring never end on DIY paths
• Who answers when something breaks: you, or a team that's already watching

There's a fourth option that sidesteps the trade-offs entirely: a managed, done-for-you model. This is where a service like AI Business Sites fits — a custom-built site plus an AI back office, live in 7 days, with the provider handling hosting, security, content, and updates on your behalf. You keep full ownership of the code, content, and domain, and there are no long-term contracts. The platform is standard technology any developer can pick up if you ever leave.

The distinction matters because it reframes the whole debate. As one analysis put it, the question is no longer "which platform has more features?" but "which model lets me focus on my business instead of managing my website's infrastructure?" That's the real decision in 2026 — not WordPress versus the alternatives, but managed versus DIY.

If you'd rather spend your hours running your business than running a website, book a free 30-minute strategy call at aibusinesssites.com/book-a-call. No obligation — just a conversation about what your business actually needs.