WordPress on .ng domains: 97% (2,870 of 2,954 detected) (Source: WebPulse Common Crawl scan, 7.37M+ detections.)
The Number
Turkey at 96%. Iran at 89%. Those were striking. Nigeria matches Turkey's monoculture at scale. Out of 2,954 detected frameworks on .ng domains, 2,870 are WordPress. The remaining 84 — React (57), Drupal (8), Joomla (5), Next.js (5) — are statistical noise. At nearly 3,000 detections, this is confirmed monoculture.
Why Nigeria Is Different From Turkey
Turkey's monoculture comes from a freelance ecosystem that defaults to WordPress. Iran's comes from sanctions blocking modern platforms. Nigeria's has a different driver: the intersection of a massive informal economy going digital and the dominance of WordPress tutorials in Nigerian developer education. Every Fiverr freelancer in Lagos learns WordPress. Every SMB that goes online gets WordPress. The pipeline is WordPress-only.
The Systemic Risk
2,954 detections confirms the pattern we saw at 832. The .ng domain has near-zero framework diversity. Every WordPress CVE is relevant to 97% of detected Nigerian websites. There is no hedging, no alternative infrastructure, no fallback. The entire detectable .ng web shares one attack surface.
