← All frameworks
41
Drupal
legacy
php · cms · since 2001
caution
Updated October 2026
Drupal scores 42/100. Consider migrating to: nextjs, django, laravel.
Dimension breakdown
Security
1200 total CVEs on record. 89 critical severity. 8 actively exploited (CISA KEV).
Total Cves
1,200
Critical Cves
89
Exploited Cves
8
Avg Cvss
6.5
Cves Last Year
120
Performance
Average performance. Room for optimization.
Ecosystem
4,200 GitHub stars. 200 contributors. 6 releases in the last year.
Stars
4,200
Contributors
200
Releases Last Year
6
Avg Issue Close Days
60
Ai Readiness
Poor AI-readiness. Built for human-browser consumption. Bloated HTML output, plugin-injected content, weak or bolted-on API support.
Structured Output
40
Api First
0.0
Headless Capable
0.0
Developer Experience
Below-average developer experience. Legacy patterns, complex configuration.
Market Trajectory
Score
35
Market Share Pct
1.5
Cost Of Ownership
High cost. Significant hosting, maintenance, and security patching burden.
Actively exploited vulnerabilities
Updated 2026-10-11
5 entries
5 confirmed vulnerabilities being actively exploited in real attacks right now. Source: CISA Known Exploited Vulnerabilities.
Latest entry: 2026-05-22
Drupal scores 42/100 overall. Strongest dimension: performance (65). Weakest: security (35).
Latest Drupal insights
3 Frameworks Ship Zero GitHub Releases. 8 Ship 50+. The Release Transparency Divide Is a Security Signal.
June 24, 2026 · 5 min
Drupal Has 5 CISA KEV Entries. The Enterprise CMS Is on the Federal Watchlist.
June 21, 2026 · 4 min
Wix Reaches 8% CMS Market Share With 32.6% YoY Growth. It Is Now Larger Than Joomla, Drupal, and Squarespace Combined.
June 14, 2026 · 6 min
June 2026 Vulnerabilities: Runtime Servers Required
June 13, 2026 · 6 min
Drupal Core SQL Injection: Anonymous Access, CISA KEV, Exploited in the Wild
June 13, 2026 · 6 min
Universities Built for Browsers Are Invisible to AI. That Affects Enrollment.
June 10, 2026 · 5 min
Citizens Will Ask AI About Government Services. Most Government Sites Can't Answer.
June 10, 2026 · 5 min
E-commerce Migration: Magento/WooCommerce to Headless Is a 63x Cost Reduction.
June 10, 2026 · 6 min
Education Is the Slowest Sector to Modernize. It Has the Most to Lose.
June 10, 2026 · 5 min