← All insights
Security & Trust

The Balkans Run Joomla. The Rest of Europe Forgot It Existed.

Croatia 9%, Serbia 9%, Slovenia 7%, North Macedonia 6%, Bosnia 3%. While Western Europe moved past Joomla years ago, the Balkans still carry significant Joomla infrastructure.

· 4 min read
Share on X LinkedIn

The Joomla Belt

9% (884 of 9,826 detected)
Joomla on .hr (Croatia)
Source: WebPulse Common Crawl scan, 8M+ detections.
9% (776 of 8,624 detected)
Joomla on .rs (Serbia)
Source: WebPulse Common Crawl scan.
7% (458 of 6,537 detected)
Joomla on .si (Slovenia)
Source: WebPulse Common Crawl scan.
6% (167 of 2,790 detected)
Joomla on .mk (North Macedonia)
Source: WebPulse Common Crawl scan.
3% (117 of 3,908 detected)
Joomla on .ba (Bosnia)
Source: WebPulse Common Crawl scan.

Joomla is 1.3% of the global web. In Western Europe, it barely registers. But draw a line from Croatia through Serbia, Slovenia, Bosnia, and North Macedonia — and Joomla is 3-9% of every country. The Balkans are a Joomla belt, and nobody was tracking it until now.

The Global Joomla Map

The Balkans aren't alone. Thailand (19%), Russia (11%), Greece (11%) — Joomla's geographic map is a belt from Southeast Europe through Central Asia to Southeast Asia. The 'dead' framework lives in specific geographic corridors. These aren't random outliers. Joomla communities formed in these regions 10-15 years ago, built infrastructure, and never migrated.

The Security Implication

Joomla has 789 known CVEs — fewer than WordPress (18,005) but more than most modern frameworks. The Balkans' Joomla concentration means every Joomla vulnerability disproportionately affects this region. When Joomla's security team patches a critical flaw, the urgency isn't global — it's geographic. The Balkans, Thailand, Russia, and Greece carry the exposure.

Share this insight
More insights